This question specifically asks "where" to store secrets. The answers provided are dangerous. Yet, my brief answer which directly answers the question posed, to store them in a system's native keychain, was abused because I also linked to a popular NPM module to accomplish the task without duplicating their how-to page in my answer. Bear in mind that neither the module or link was the answer, only additional information. As a result of the abuse, the only answers now visible advocate storing secrets in environmental variables.
Is it really Stack Exchange policy that the curation of an answer takes precedence over the accuracy, especially when said inaccuracies can be dangerous? Or is this an example of rogue, foolishly pedantic moderation?