Possible to set a password for the rclone config file without using rclone config (2)?

Yep, will do that.

...will also look into using those environment variables, if I can make sure they are only valid in the RCLONE process and can not be read from the "outside".