I'd say so what.
I hardcode many API keys to pull data and so does many people, and worst case scenario you need to regenerate it if it leaks.
Not all access keys are the same.
Did you make an account just to justify questionable data security practices by the people fucking around the social security system without any oversight?
ok, Marko
doth protest too much, or something.
"if it leaks" -> "if you detect or get notified that it leaks and you're able to catch it before the credit card linked to your AWS account is drained by a thousand crypto miners"