They are really only private if you design it that way. There are numerous ways you could have access to those private parts of your bashrc, but still make the actual bashrc public.

That's coming from my kubernetes background though, and handling secrets this way is not something that people are always accustomed to.

Aren’t the default permissions 644?