It doesn’t provide even remotely close to the same level of security as Vault because of how it’s designed with environment variables in mind.

The lack of an API means if they want to add secret injection without env vars, you will be launching a CLI command in a thread or subprocess as opposed to using a native library.

There is something to be said about creating a secret manager that is easier to use than vault, but this misses the mark in way to many areas for me to consider it a serious contender.