I only use private repos, so that when my .ssh and .env leaks the public doesn’t see it. Probably. Maybe. Well…
But mistakes happen all the item. It's very easy to fat-finger a line in .gitignore - one char off and you're toast.
I have often thought it would be nice to have a good tool to retroactively view and tidy them, but everything I've seen has not quite hit the nail on the head.