Come on, this is not surprising.
"Private repositories" were never private as I said before. [0]
"Private repositories" were never private as I said before. [0]
Well, duh. That's not a reason to avoid every "private" feature in every product on the planet.
A failure in the system is still surprising. I could equally say "all software has bugs, so it's not surprising if your self-hosted solution leaks data". But that would be too dismissive, as you are being.
Very cool that it is not surprising to you.
But to others (some are even in this thread!) it is both new and surprising. They unfortunately missed your 4 year old comment, but at least they get to learn it now.