Slack generates it's previews based on the Sender's Google Doc permissions, under the assumption that if they're sharing the doc link they're also sharing the doc.
Permissions like this should inherit rather than clear. And if the software cannot sensibly allow that: deny all.
And I wonder if the browser-based Slack could do the same...
If you don’t want this behavior you can revoke Slack’s access.