These sloperators don’t bother to learn anything about software development, and then act like when they make a mistake, it’s somehow unknowable mystery due to an architectural failure. A value in a .env file is: required, secret, not safe to commit, restricted to only one service, and available only in the current environment. If you have prod keys on your dev box for multiple services, you got it wrong, and that’s not the .env file’s fault.

KEY=value cannot say whether a value is required, secret, safe to commit, available only in production, or restricted to one service.