That’s true of the discourse-mozillians plugin, as of what happens on Mozillians itself I share @Pike’s scepticism.
discourse-mozillians should (and will) also verify groups every so often (maybe every week?) for every user, so that users who use Discourse as a mailing list won’t get vouched/nda/staff emails if that status changes for them on Mozillians without them logging in again.