Obviously and we are talking per line and not per file are we?

As stated by keepassxc: yes to in the same database results in a single point of failure but the easy and good solution is to store them in a separate database. Definitely more secure that stuff like some authenticator app on the same phone where the otps are used

It’s more difficult when you work with a huge legacy code base that is full of them and you have to do days of work in oder to rewrite and test everything rather then just use one.