Like you say in the article, please make sure you mirror the repos back up to a public forge in the event that they’re closed.
I remember when I was at GDS back in 2016 a less-central team tried to make a repo private because of an security incident they decided not to prioritise, and they were surprised to find out that forks didn’t go private as well when they did it. Luckily they changed tack after a pointed conversation.
