Git never deletes anything: what a commit actually stores

You commit a file with an API key in it. You notice within a minute, remove the file, commit the removal, and push. The file is gone from your working tree — and the key is still readable with two commands.

Source: [Dev.to](https://dev.to/machineunderneath/git-never-deletes-anything-what-a-commit-actually-stores-3nil)