Considering private repos used to require a paid subscription misremembering seems likely. It used to be public by default, and enough people got confused by t

Considering private repos used to require a paid subscription misremembering seems likely. It used to be public by default, and enough people got confused by this that AWS & Github used to specifically scan repo's for accidentally public AWS credentials.