Do note rustfs has had a...questionable...security posture. See https://github.com/rustfs/rustfs/security/advisories/GHSA-h9... as a good example (hardcoded static token).

If you run (vibe-coded?) alpha software in production, assume security is compromised.

In fact, if you run software in production, assume security is compromised.