The short answer is "no".

By default, all OpSource accounts are added to the default group "OpSource_LDAP_Access" which allows reading of ALL customer objects. Please note this group is reserved for OpSource users only. Absolutely NO CUSTOMER objects should be added to this default group.