Yes you're right. Sorry about the overlap. Its been a while but from what I remember the module system doesn't have any concept of public/private i.e. fine grained control of an exported public api and essentially just lets everything inside a module be accessible. I didn't like that but you can live with it I guess. The package system is what was problemtic because it pulls everything into the runtime libs i.e. it works just like R. I was hoping they would have package management like elixir with mix, rust with cargo, or npm or some tool like that which allows you to build complex modular software.
A new package system is in the works and, afaik, should be available with Julia 1.0. Here the Julep: https://github.com/JuliaLang/Juleps/blob/master/Pkg3.md. Don't know what the current timing/state is though.