OK, quick tested this on a QA copy of the DB in question, and if the role membership is NULL, you can connect to SQL (expected) but you can't query anything in the DB. But, you can view system stored procedures and users that are built-in to SQL.

So, really, such a user won't be able to do anything really...

Jason