are you still trying to solve this case using a filter?

CB Privacy has to be heavily extended to modify the userlist query to exclude privacy protected users. It's something we're still working on as the privacy rules storage behavior needs to be improved first since the queries won't be optimized if we don't, which would result in slow userlists. That requires a storage rewrite of CB Privacy so it hasn't been a priority.