>>308295806
Yes if you share the instance ID. The only people with access to that are accounts inside the instance. Don't share your login because you can also get IDs from the API/vrchat website, so nosey friends might website login as you to check what you're up to then come visit that ID with their own account once they know it.

Also, official vrchat staff can visit any private or friends+ instance at any time and also appear invisible to the list of players in the world (but they still show a matching location on the friends list if someone in there has added the staff). Ron literally did this to /vrg/ in 2018 and only got caught because some streamer had him on this friends list.