Quick explanation of 'hidden smart groups' and why they're included in my mailing uninvited?
The search needs to persist through your whole mailing process, so it gets treated as a "hidden smart group".  It's silly of CiviCRM not to explain better, but that's the deal.  No mystery hidden people getting added without your knowledge.