Design a self-service, secure, low-cost way for teams to publish, discover, and subscribe to read-only BigQuery data with maximal freshness.

Analytics Hub is the correct choice because it's Google Cloud's managed service specifically designed for secure, self-service data exchange. It allows data providers to publish data listings (which can be BigQuery datasets) and data subscribers to discover and subscribe to them. This provides maximal freshness as subscribers access the data directly from the provider's BigQuery dataset without copying, and it's cost-effective because subscribers only pay for their BigQuery usage on the shared data. Publishing authorized datasets in the subscriber's project is less scalable and requires manual setup per subscriber. Creating per-team shared datasets and granting bigquery.dataViewer is a manual, less discoverable approach compared to Analytics Hub. BigQuery Data Transfer copies data, which introduces latency, increases storage costs, and doesn't provide maximal freshness.