> Much more importantly, you run the risk of a classic 'whoops I pushed an API key' blunder if your code gets auto-mirrored to a public repo. Thousands of comp

> Much more importantly, you run the risk of a classic 'whoops I pushed an API key' blunder if your code gets auto-mirrored to a public repo. Thousands of competent projects and millions of incompetent projects figured it out. This is not a reason to distribute source code digitally. Any use of this reasoning just makes the user seem stupid and unable to reduce the risk on this trivial problem.