.env is available in plain text via web!

I recently decided to build and run a web version of my app. I was really surprised to find out that your env file is clearly visible in the Google Dev Console as plain text.

If this behavior is expected, it should be clearly stated in the documentation with a big WARNING sign.

.env is not for storing anything you can't expose to the public and this should be clearly communicated.