This code is 2 years old so it was not changed recently.
It does seem intentional because even the case of restricting a group to its members does not make an exception for staff:
(BTW github oneboxes fine, but the blame URL is not handled.)
5 Likes