A participant link only ever shows the event basics, requirements, and updates that apply to that specific person's role and group — never other participants' information.
If a link is sent to the wrong person, or someone's involvement changes, revoke it from the event's People section. A revoked or expired link stops working immediately; the person sees the same not-found response as an invalid link, so there's no way to tell the two apart from outside.