Groups are quite useful in "need-to-know" information partitioning schemes. I personally haven't run into these fiddly problems you speak of, besides improperly set files (e.g. a 740 in a tree of 775).