At @openprivacy we've hosted our own gitea (formally gogs) instance for the last 7 years and while it's helped us get a lot of work done - it's a constant maintenance headache.
Having every new contribution be public by default incentivizes spam.
Forcing users to create account to make issues/pull requests limits accessibility.
Dynamically generating every single commit tree means mass scraping campaigns require identification and siloing..