Beyond Membership: Limitations of Add/Remove Adjacency in Differential Privacy