I mean what if you create a private repository?

Apparently not all their services have full encryption (I think their forgejo is unencrypted and plain text?)