For sure. It used to be common practice for researchers to share their pathogens.
As far as level two pathogens are concerned, the most risk is to the researcher, unless there's malicious intent. If there's malicious intent, you could do a lot of damage with a level two pathogen, if you decided, as they did in the U.S., to take some listeria and go to several Pizza Huts locally and spike the salad bars with listeria or salmonella or shigella. So there's potential to do harm, but what's the likelihood that people would do so?
But in day-to-day research, the people who are primarily at risk are the researchers. So it's more a workplace hazard than anything else. Level two pathogens don't tend to be that contagious, so the primary risk is to the individual who's working with them.