If a user is granted access to view an invoice you can see all comments and attachments typically via a follow up group. Sometimes it would be useful to be able to hide comments and attachments in order to keep sensitive/confidential info to that invoice. So I would suggest to implement a functionality where you have the possibility to hide that info or being able to make a 'confidential' comment to an invoice.