Yes you're right. Sorry about the overlap. Its been a while but from what I remember the module system doesn't have any concept of public/private i.e. fine grained control of an exported public api and essentially just lets everything inside a module be accessible. I didn't like that but you can live with it I guess. The package system is what was problemtic because it pulls everything into the runtime libs i.e. it works just like R. I was hoping they would have package management like elixir with mix, rust with cargo, or npm or some tool like that which allows you to build complex modular software.
Julia has export statements to make things public. You can always access the non-exported parts, yes, but that's true with _ variables in Python too (we're all adults and all that).