> You’ve completely missed the most dangerous thing mentioned, namely that private forks are not private.

What do you mean "missed"? They described the situation where data is leaked from a private fork, which is when you make the original repo public.

There's no other time when data leaks. A public repo can't have ongoing private forks.