Model for Membership Lists and Groups (tech support question)

[zkrebs]

If we have one master group in civi linked to one master list in Mailchimp, which sub-groups in civi being linked to groups under the Mailchimp list - everything works fine!

However, if we have 2 or 3 of those sub-groups be based on someone's Membership status, it still works, yet when someone subscribes or unsubscribes they can see membership groups they should not see.

How would you design the syncing/integration so the groups sync, but people can not join or see groups they are not a part of?

Thank you.