Concur. I found Gradle to be to far removed from the truth so to speak. I like Maven's declarative xml and its promulgation of the build life-cycle. This makes a complex build easier to maintain in the long run imo.
Therein lies a dilemma: knowing what does what on macOS.
I just sit around watching log stream output and wonder why that JPEG is being 'processed' by Safari. But that's another story.
The 'deficiency' of PGP lay in the leaky nature of the computer itself. How do you maintain your all important private keys? On disk? In memory? USB? All are leaky from the get go. And this, I posit, is the problem gents.