Secrets in unlisted GitHub gists are reported to secret scanning partners (github.blog)

Figured this was important because I imagine there are people who think of unlisted gists as 'private' and a handy way to move data around, but they're not.