I'm wondering this too - private repos might be a goldmine of intellectual property, which businesses assumed would stay "private", i.e., not in the hands of companies like Microsoft.