Assigning multiple groups for hosts would be a nice thing to have.

Example:

My storage machines would be in Storage, SSH and maybe VPN.

My Wireguard servers would be in SSH and VPN.

All my servers behind NAT would be in the NAT group, but not in the SSH group.

and so on