Agreed but this of course depends on if they store it on open repos vs Private repos. We store our repos on private repos and we have a script on deploy to rep

Agreed but this of course depends on if they store it on open repos vs Private repos. We store our repos on private repos and we have a script on deploy to replace the wp-config with the actual server details on deploy.