we hide secrets in environment variables and call it secure 😅
Then platform gets compromised and suddenly every secret needs rotating
Environment variables are configuration 😎 not a security boundary.
Are we putting too much trust in our infrastructure providers?