Yes, that's true. I suppose you could always just move them to a circle that you never share with. But I agree that, if this is really a problem, it's best not to have a Google+ account at all. (You've got to admit, though, this is a pretty contrived scenario. Someone that runs their own web server can also tell that you've never visited their site, for example.)