Absolutely. The way to understand this is to use this line of reasoning. Currently, you must publish your calendar to the web to use an HTML widget. If your calendar is published to the web that means that anybody on the web, if they know the URL, is able to read (and read only) the events on the calendar that are public. Any events on your calendar identified as "Hidden", or "Busy" act appropriately in widgets.