The Best Defence Against Embarrassing Leaks is Transparency
It has probably been said many times before, with some words or others. Transparency is a preventive measure against catastrophe. The general idea is, when you minimise the need for secret-keeping there's a lower risk associated with unwanted disclosures. It's applicable not only to businesses but also personal relationships. Tensions can grow due to secrets.
Half a decade ago we worked towards publishing all our code and releasing IRC logs every time we can, preferably every morning (as we had done from 2008 until around 2015 when IRC logs were released in large batches, i.e. further apart to reduce the workload).
Groups and companies can decide to become more transparent, but usually they do so when it's too late, e.g. when Debian-Private is already disclosed to the public, selectively. It's akin to improving one's security after data breaches, not before them. Being proactive and learning to share is good practice. █