@j_angliss @Viss don't applications installed through HACS have access to all secrets by default anyway? They run in the main python process with the same access as core. Meaning they have access to all secrets already. Basically, it doesn't take one line to abuse the HIBP functionality, just one line to ship the secrets elsewhere.

As far as I understand it, anyway.