That's also one thing we're struggling with in Status. For now we use the 3rd solution, a common `datatypes` file and assume that code doesn't touch what it is exported for it.
For public API you can choose not to export a type and users will not be able to create or inspect its field (even if those have the export marker). They would still be able to assign it or pass it to one of your proc.
