In general, is Vault well suited for things like PII data for millions of users (like oauth2 tokens, facebook id, etc).

im not a security expert, so im wondering whether vault encapsulates security best practices to store lots of sensitive data in production