@mkljczk @me it's not a dark pattern. Dark patterns are designed to manipulate users into doing something they otherwise wouldn't, for the benefit of the operator.

Private repos cannot be cloned or accessed in any way by anyone not on the access list. A repo which enabled this hypothetical feature could still be publicly listed and git cloned.

My instance has ~20 users (slowly growing) so that'd mean I'd have to manually add each new user to each repo / org.
I think it's a pretty valid use case. I'm not doing that out of malevolence either. 0.o