Managing Access Request Segments - SailPoint Identity Services

Can I get some guidance on if the following is still true or if SailPoint has fixed (what I believe is an issue) the concept of all roles not added to segment are considered “public” This is not mentioned anywhere in the set up instructions and is critical to making segments work as described if it’s still true.