As with #27292, I'm going to nosy Georg Brandl about this so he can guide us in how to approach it.  My hunch is, it'd be best if we avoided specifics, and talked instead in generalities.

Perhaps all that's really necessary is to consistently assure the user that the secrets module represents best practices in Python, now and in the future.