This is a big problem and can be too had a surprise for someone who uses a plug-RT.
Please experiment, putting in the article one module with the two plug-ins and change for this module Access Level Group. Plugin load module RT ignores the access to the module and displays it regardless of the law.
eg.:
[loadmodule=225]
{loadposition login}