Yeah there is an inconsistency internally, our automatic group membership is based off a strict domain match per:
Our matcher for the email_domains_whitelist uses this match
I think it makes sense to make this coherent and consistent.
@techAPJ can you adjust the group regex.. carefully and make sure it is tested so it also allows subdomains.