While you do raise some valid points, there are some things (such as credentials) that are less valid as you should never be baking creds or environmental settings into the build. In our case, the cred mechanism is injected during the deploy — not during the build so we can spawn a test environment with creds for that specific environment.