MF OO System Account details are stored clear text (appears as dot/star). Due to which, anyone can easily figure out the System Account details.
1. Assign the password to a flow variable
2. Encode it
3. Decode it and assign to result variable.
It should be stored encrypted and always value of system account should be assigned to a variable - defined as encrypted.
Described in above section
you have to explicity mark the variable - assigned from a system account password as "sensitive"
Anyone having READ access to the System Account, they can easily figure out the password.
Encrypt the System Accounts & mandate assigning a system account password to variable defined as "encrypted"