the problem is, theres a pretty good chance people will still send all sorts of passwords and access credentials. that's a big liability if you get exploited.

should you do this? no.. but people do, all the time.. take for example this MySQL bug report with many complaints that the command now issues a warning when you specify a password on the command line: https://bugs.mysql.com/bug.php?id=66546