Though I chose Unlisted or Followers-only when posting question, the question are sent to public.
This is probably because api_new_question() in blueprints/api.py does not look up visibility api argument.
Tihs patch fixes by adding visibility argument check at api_new_question().