The primary differentiators are likely the fact that encryption of those secrets is still fairly new for k8s, and vault has a much more rich way to define access to the secrets. Vault makes sense when it is more than just k8s you need to interact with