My comment is specific to docker, although environment as a broader sense can be discussed.

I remember reading that it is possible to end up in situations where your environments can end up in the layers of the docker image. Also, you can read the secrets of a container with inspect, and apparently linked containers might be able to access other containers's secrets.

I think it was this article: https://snyk.io/blog/keeping-docker-secrets-secure/