[FiloSottile]

Thanks for opening reports! I'll get to them soon.

Note that there are no secrets passed on the age CLI, for the reasons you mention. Only public keys, flags and file paths.

Being a file encryption tool, I think decrypting files to disk is core functionality with legitimate use cases, like backups and encrypted cloud storage.