Is there anything you are doing to prevent these notebooks from being indexed by Google/etc? Gists will show up in google search results if they've been linked from anywhere that google happens to find. The robots.txt just has 'Allow: /'.
I have no experience with Marimo so I guess I don't know the security model here.
I just turned off /notebooks in robots.txt
Our thoughts are the same as gists- Molab is built to share your work and give you a place to tinker. Please don't put your api keys in there