Well someone could have easily discovered the environment variables vuln without getting the source code, although it is unclear why so much was disclosed in en

Well someone could have easily discovered the environment variables vuln without getting the source code, although it is unclear why so much was disclosed in env vars. It suggests that everything runs as the same user, or you would not get anything.