Everyone is blaming the process, secrets of prod etc. I'm saying, there's a test campaign problem, or, more probably, a lack of a human tester. Someone made a test in dev, it got put to the test, and wen through to prod. No real security leak or anything, just a product not properly tested. Like 99% of the internet. Who has the time and money to refactor, doc and test?

It's like climate change: let's all drive full speed into a wall, while tinkering with the stereo system of the car.