Private groups is tricky on a public blockchain. You need to come up with a way to encrypt the information and only allow approved users to have the decryption key(s).

I agree with all of your points though.