The problem (for large sites) is the CPU usage required to repeatedly re-parse and re-process the group file; this is apparently not insignificant for large group and password files. IO isn't an issue because as you note, it'll be cached.