First, people ran to bitbucket visit if the per repo pricing. Now that that's been fixed, we're faced with high costs per user. That difference can be used to purchase other Atlassian products like Jira and Bamboo.
How can github beat that value? I think github is satisfied with bring #1 for hosting open source software.
Passwords emphatically do not belong in git.
Your private repos should be maintained such that accessing them would not compromise your security.
Let me brig another example for OSS projects that could need a private repository: branches for security fixes that are not public yet.
A private git server would probably be better for that, but also wouldn't cost $0.
Please tell me you're kidding.
Is ansible vault encryption brute force proof? I have no idea. I could spend an hour and figure out. But why not just follow decent engineering principles and double lock my door?