The way I understand it, even Basic (unpaid) groups can Direct Add people to a subgroup, but that person has to be a member of the main group first, with all the spam control features associated with the main group Invite process.