Masking secrets is not meant to defend against malicious code, but mitigates a class of issues in the build system and the software you build that could lead to

Masking secrets is not meant to defend against malicious code, but mitigates a class of issues in the build system and the software you build that could lead to inadvertently leaking secrets.