No immediate action required here, but it feels wrong to define the visibility options here, as they are being used for Groups and Users as well, and later on for Discussions, etc. too. It still feels like the definition and enforcement of these should be in Authz.