If you add a private category to the top nav bar, all users will see that link, even if they do not have permissions. Instead, only users with permissions should see the category in the top bar nav.
I don’t think we anticipated anybody would put a private category in the header… certainly never part of the design intent, so I’m not sure how this could be a “bug”.