It's not just incompetence. Apart from costs, there are some strange limitation and very specific feature missing if you use Azure PaaS DBs with private endpoint enabled.

It's like private access has been added as an afterthought and lags behind the "normal" (public) access.