Totally agreed, I'm not sure what the right solution is. Private groups highlight this tension because you might want to follow people you're in a group with, but then you're actually potentially leaking data about your association that would otherwise be private. Something to think about.