While private repositories offer some level of protection for your code they still do not have adequate protection to store information as sensitive as secrets. Imagine if there was a plain text file with all your credit card numbers within it, you hopefully wouldn’t put this into the company's git repository. Secrets are just as sensitive.