In theory, but in practice how difficult is that?

not hard for secrets with explicit patterns and existing pipelines to detect them

Unless they're base64-encoded or compressed?