&quot;that we&#x27;re not developing in the open&quot;<p>Honest question... why?<p>I totally understand the mindset of &quot;gotta go all secret squirrel to protect our profits&quot; but if your org isn&#x27;t in it for the profits there&#x27;s not much to protect?<p>I have seen examples of people performing very naughty acts like private repos to hold plain text passwords, plain text cloud service keys, plain text corporate credit card numbers for expense payments, etc.