How does the app read the variable if it can't be read after you input it? Or do they mean you can't view it after providing the variable value to the UI?

They mean the latter. Very unclear how that translates to meaningful security.