If he had only spent an extra $0.50 and added a Microchip 608c (https://www.microchip.com/en-us/product/atecc608c) to the design, then you wouldn't have to deal with cleartext passwords in files. Instead, you could have elliptic-curve, asymmetric public-key encryption.