> It's not my intuition that materializing secrets to files is a better way to protect them than just injecting them into the environment, where they don't persist.

I don't really follow this reasoning. Where are you injecting the secrets from?