I think this is actually a good case for development containers. That way you're very explicit in what you expose in the container. It could still read your AW

I think this is actually a good case for development containers. That way you're very explicit in what you expose in the container. It could still read your AWS keys that you pass in through the ENV though and upload those to some server in China / Russia. Or it could delete all your source code, but that's counter productive.