package-private wouldn't help in this case either. All a consumer has to do is put their class into the same package, right? And then they have access that is not desired.
I'm not familiar with @hide, but doing some SO research, it appears it merely hides the method(s) from the documentation.
Can't get to Dokka docs right now. Does it have something to hide a function from the docs?