I agree it is the term 'private' that is wrong here, not necessarily the behavior (though it obviously could be more secure.)