Yeah that was always my assumption. I thought you had discovered a way to protect a group from loading using workflow conditions, nevermind.
I am referring to using privacy rules for workflow conditions. See this post by @keith as an example. This is what @boston85719 was referring to:
