Why "mark your variables as sensitive" is the wrong lesson from the Vercel hack | Hacker News Reader