Environment variables were stored on their end in plain text, unless they were specifically marked as sensitive, which was opt-in only.