How about a security leak (say.. Vercel) and having to run down all of these non-technical folks and getting them to rotate env vars? Or ask them to not do things on their personal account?