Because in the latter case the commandline of the executed process (which may be exposed in various places, including a simple process list) is `foobar --secret

Because in the latter case the commandline of the executed process (which may be exposed in various places, including a simple process list) is `foobar --secret=hunter2` and in the former case it's just `foobar`.