https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github
GitHub’s repository architecture necessitates these design flaws and unfortunately, the vast majority of GitHub users will never understand how a repository network actually works and will be less secure because of it.