Is GH Copilot only on public repos? My assumption is that code from private repos was also showing up. I feel like I read an HN article about this previously. Don't have evidence but that seems like a much bigger issue and trust violation if that is true.

Kinda like how gmail was reading everyone's emails and showing ads based on them.