You can make multiple combinations.
Having a public node (as the face node) with public channels and all liquidity shit, offering good routes. More as a decoy node.

Then behind this one, you could run another node, but only with a big private channel with your node A (public). Optional you could open another big private channel (for more reliability) with another good big node.

Then your "customers" bank will connect with private channels and nodes (like Zeus, Blixt, Breez, Electrum, Mutiny) towards your node B (private) offering them liquidity.
But for private nodes is also recommended to have 2-3 channels not just one, for more reliability and also using MPP (multi-part payment). 

 Make sense. I endup with this setup. I'm still wondering if I could run a node with just private channels to (hopefully) good peers and still have an ability to receive payments (for merchants using an account on lnbits connected to that backend).

Privacy aside (for sake of simplicity). I don't need to (or want actually) route. I need the merchants be able to receive. 

 Sure, why not?
I wrote several guides and here you have some that you could run two powerful private nodes on your mobile device:
- https://darthcoin.substack.com/p/getting-started-zeus-mobile
- https://darthcoin.substack.com/p/getting-started-with-blixt-mobile 

 Why not is the question.

Is there a disadvantage in having just private channels? Is it more likely a route to fail for incoming payments with only unannounced channes?

For small payments never. For bigger one (like 0.005) I can't tell if it's because of bad connection or discoverability (if it's a word)