Riiight. 1000 individuals, some operating under pseudonyms from countries outside our jurisdiction, and an unknown number of whom have financial conflicts of interest with this "other company" but it's OK to give them this information through a bulk mailing list immediately on a whim.
The general public, on the other hand? Permanently a "serious no-no" according to those same thousand people.
I think the reality is that the most embarrassing thing revealed by opening up debian-private would be what types of thing are inappropriately discussed by a thousand people who think no-one's looking. The established policy seems to have been intended to stop this, but it's clear that it didn't have that affect. Worth trying again, I think.