Conversely, I've never in 16+ years of professional development regretted marking a method protected instead of private for reasons related to API safety

it still strikes me as something people believe in the abstract, rather than know from hard experience. I've always found that if you look behind/under widely held beliefs, you can find useful gems.