That's what MLS is for, it reduces the amount of messages needed from O(n) to O(log(n)). Which is nice, but still doesn't scale as well as O(1) which is what you get with shared keys (at the expense of much worse security).