tldr: the MLS encrypted payload is in a nostr event which has a tag for the group ID.

It's clear that a message was posted to the group, but not by whom, and thus it's unclear of how many participants are in the group.

This sounds like a OK tradeoff.