Can Domain Access ensure that a civi 'admin' on domain-B can not login via domain-C and see contacts they should not see?
Seems this is possible in a fairly blunt way by using the domain_bonus_login_restrict module which is part of the Domain Bonus module