Just a small update on this - I believe this behaviour has actually been changed in this new commit:
https://github.com/discourse/discourse/pull/22628
If you update your site, users should now be able to have tags they have group-permission to see show up in their sidebar selector without needing to set include secure categories in tag counts. 