A bit careless but mostly a bad default. One click shouldn't put passwords in files people commit. Anthropic should fix it.