If I understood correctly, the service is still able to see what (other) groups you're in (but cannot read contents)

Which doesn't make much sense since all MLS communication on WhiteNoise is wrapped and encrypted again. But maybe I am wrong.