There are some interesting points in this piece, but if you can't trust a binary that is executed as a subprocess, you have much bigger problems. I also don't

There are some interesting points in this piece, but if you can't trust a binary that is executed as a subprocess, you have much bigger problems. I also don't think it's true that developers aren't expecting secrets to be stored in the environment. If anything, this is exactly where they expect them to be stored. Maybe things were different a few years ago. In the end, I want to meet people where they're at. If accessing secrets is difficult or unfamiliar, then many won't use any secrets manager, which leaves them much worse off.