"private" doesn't mean private if it's on a centralised platform.

https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github