[dathinab]

there are also the various fundamental security issues GitHub has where making a repo private (and a few other cases e.g. related to forks) comitts/content _which was never public_ (e.g. pushed after it was made private) are publicly available.