On the other hand, PEP 387 explicitly says that “if something is not documented at all, it is not automatically considered private.”
IMO, we should document the questionable API – if only to (soft-)deprecate it and tell users how to replace it. And deprecated API should not be added to __all__.