But when importing groups, all groups from the whole directory are visible. I would not call it unsecure, but at least it leaks out some information.
This is normal for vCloud Director, because the groups you may want to import might not be in the same OU as where the users reside.