Private, but likely with many friends and acquaintances. Everyone they allow has access to all they've shared. This is a good step, but this isn’t the level of protection some believe it is.
Yep, anecdodltally i ran an experiment on this. Trick is that ppl are in "networks". Find somebody you think is in your target network who got low followers to following ratio and send a request, do this 5ish times. Then go based on recommendations and ppl will see "oh that account follow these other ppl i know lemme accept a follow request".