.env file question

Crazy. Here’s a screenshot from another thread that shows how the .env is uploaded.

Cursor uploading files listed in .gitignore and .cursorignore is a huge security flaw!