It should be possible to encrypt environment variables. This could be very useful for passwords and secrets. Digital Ocean supports this feature: https://docs.digitalocean.com/products/app-platform/how-to/use-environment-variables/