The issue here is if you'd need to prove where your data came from. So the default should be public unless you can prove the source of all the training data