Why any user can view all the contacts belonging to other groups?

Perhaps this also helps here.