Everyone can now easily view old commits on GitHub even when force-pushed

If you accidentally push something you didn't want to be public, after you force-push to get rid of it, how can you get it out of this thing too now?