tldr: the MLS encrypted payload is in a nostr event which has a tag for the group ID. It's clear that a message was posted to the group, but not by whom, and thus it's unclear of how many participants are in the group. This sounds like a OK tradeoff.