> Unless GitHub knowningly trains on code in private repositories (not that I am aware of)

they absolutely have