Developers can’t seem to stop exposing credentials in publicly accessible code

[mercyf]

Is it because these developers lack knowledge, or just simply lazy and don’t care at all?