I agree, but even so, you can make things a lot more secure from "having plaintext credentials commit to source code versioning" without changing your entire in

I agree, but even so, you can make things a lot more secure from "having plaintext credentials commit to source code versioning" without changing your entire infrastructure, which a move like that would require. Simply use environment variables and a .env file.