ensure that estimators only add private attributes and attributes with trailing _

Once #7553 is merged, we should add a test that ensures that `fit` only adds attributes that are either private (start with an `_`) or end with a `_`.
