@povoq@slrpnk.net okay, yes. This is true, once it leaves the local server there are no guarantees.
However I'd have to ask whether there is an acceptable tradeoff in risk of content exposure.
After all, even in local private groups, things could get leaked via copy-paste, screenshots, etc. The weakest link is the social element.