Maybe the real security problem is embedding passwords and other various secrets in the source code?