Current submission exposes everyone's data (at least in principle. There should be a way to avoid that. But it's not easy, even with private repos.