If Pirl is "From people, to people" why are they running on private git repo?

Shouldn't everything be public then?
What are they actually trying to hide/protect?