To be fair it seems the only way they can moderate is if a member of the group chooses to invite them, at which point you no longer have privacy.

Still seems like a bad precedent though to bake this leak into your client.