If a category is invisible and has posts, these become visible to anyone with access to a visible parent category.