Docker Compose reads your “.env” without opt-out
Docker Hub still does not have any form of 2FA. Even SMS 2FA would be something / great at this point.<p>As an attacker, I would put a great deal of focus on attacking company’s registries on Docker Hub. They can’t have 2FA, so the work/reward ratio is quite high.