This is a business logic flaw, not a code bug. The entire premise of "store a secret on-chain" is broken.
→ `private` does not mean secret
→ `internal` does not mean hidden
→ If it's on-chain, it's readable by everyone
⚠️ Never store passwords, API keys, or sensitive data in contract storage.