You're right - the TechCrunch article didn't mention access to private repos - only private employee chatrooms. But the question was raised here on HN, asking if she did have access to private employee chatrooms what else might she or others have access to? If the security is lax in one area, one might assume it's lax in others as well. But it's just speculation - but it has merit non the less
[edit: spelling]