As I remember any who can edit Gravity form, can export its entries.
Btw., URE includes “GF edit restrictions” add-on, which allows to restrict the list of forms available to a user. Plus, such user will can export entries only for the allowed forms.
