String encryption in .NET: where the key hides and why it matters

Every .NET assembly leaks its string literals. Run strings over a DLL, or open it in any decompiler, and the connection strings, API endpoints, licence-check messages, feature flags and SQL are all si