Public by default is exclusionary; even innocuous things like @github activity feeds can be problematic.