That's correct. DO does some filtering to prevent networks from leaking to a different droplet's interface. However, we recommend that the users protect both public and private interfaces with iptables filters and use encryption where the data stored or transfered is sensitive.