I don't know why you're talking if you don't care how it is received. I'm a professional software engineer. I work on a system that occasionally passes secrets

I don't know why you're talking if you don't care how it is received. I'm a professional software engineer. I work on a system that occasionally passes secrets through untrusted contexts, encrypted with AES-256-CBC. Is that a good idea? Could we improve it? Would it be worth the effort? I'm open to learning, but this article isn't teaching, it's browbeating. So are your comments.