Environmental variables have always been available to the environment. Thats the point. Saying dont use them to transmit info is like the hysteria of "dont use

Environmental variables have always been available to the environment. Thats the point. Saying dont use them to transmit info is like the hysteria of "dont use the clipboard because any app can access it." Well yeah, the point of the clipboard is ipc. But to your point docker secrets are a thing and have been available for a while. And a publicly exposed phpinfo has been a severe dataleak since before time began. Neither of these are unknown or new. They're just an unfortunate composite enabled by containers.