I'm an OSM contributor and I've been using GraphHopper through OSM's main website to check if my mapping of pedestrian and cycling attributes is correct.
Oddly, GraphHoppers seems to be routing through ways with access=private. An example here.
I've read the pedestrian routing profile and seems to be correctly restricting access to any way with access=private. So I'm wondering if this is a bug or not. I couldn't find any mention of this problem.