Yeah, I think they can do more harm with .ssh/id_rsa than with .history.
In practice I've had better luck with shell history than SSH keys when exploiting arbitrary file reads. The history tends to reveal interesting locations.
that would be why you don't put sensitive information in the command line :)
Sorry—I meant to upvote but fat-fingered a downvote.