Simple as, "Public groups can be read by anyone, private groups require authentication but are not encrypted. Messages in private groups can be read by relays."