Why .env files are a security disaster (and what we do instead)

It happened on a Tuesday. A new hire, trying to get their local environment working, accidentally...