Google be in trouble then

It's probably best to look at what the devops industry is embracing, environment variables are as secure as any of the alternatives but poor implementations will always introduce attack vectors. Secret management stores require you to authenticate, which requires you to store the credential for it somewhere - no matter what there's no way to secure an insecure implementation of secrets access

That's just as insecure lol, env vars are far better

Even worse, they'll claim it was a bug

Yes, and I find them indistinguishable from liberal subreddits. The echo chambers are pretty easy to find..

Well when Karen asks for the 40th time how to add a new user to the system, Karen's getting referred to the documentation.

Yeah, if you tend to use your servers for pretty vanilla uses you may not have encountered it much. Once you get into the deep end, it gets deep quick.

No that's the case in the US too. I never ask why my employee wants time off, I don't need to know any more about their personal lives, they tell me too much already...

Once you have lived through library dependency hell, you care