Disclosing private repos against the owner's intent is a much more immediate and significant business risk than violating the license of open source code.

Maybe that shouldn't be the case, but it is.

This speaks to OpenAI's approach to things. But it doesn't speak to Microsoft and Microsoft would need to provide the access.