Surely there must be a way to make container secrets less dangerous?

A technical analysis of container secret vulnerabilities, where `/run/secrets` directories remain readable to any process with filesystem access. The author explores potential mitigations (environment variables, tmpfs mounting) but concludes existing workarounds are insufficient, prompting community input on more secure approaches.