Then exclude the moderator forums. I can't imagine a scenario where anyone would want to include moderator data in a public-facing newsletter... and that's the idea here, for this to be sent to a wide distribution base.
Also, if I checked permissions on distribution, performance would be shot. This wasn't an oversight, this was something to which I gave considerable thought. Right now, I generate the issue content on publish, store it once. Then I send it out to each email in the list, in batches. Checking permissions would require almost a full rewrite of the distribution process.
True. But for moderator forums, I would think just following the forum would be sufficient?