this https://community.passbolt.com/t/new-release-5-15-0-who-is-he-browser-extension-api/14707#p-33927-clearer-permission-confirmation-changes-2 should help slightly. Although it would be hard to completely avoid mistakes related to similar group names.
For now this is kind of a design pattern (not a bug) where you can see and attach a passwords to groups you are not part of. I can imagine that’s a common strategy on some organisations to share something like WiFi password designed to particular group of people by the IT guys, or to a development tool where that IT admin is only and admin, not a member. You can change that as an Admin in the RBAC settings.