Rclone OAuth Implemented Incorrectly. Exposes Client Secrets?

there are a number of posts about the tentant issue.

maybe this can help