Sitewide privacy options

I am using and it works as it should except for one thing;

The post being made in a private blog are shown in site wide activity (for example

Thats bad, very bad if you ask my users. Have I made something wrong or is it a bug?