FileVault encrypts the startup disk so lost hardware does not expose stored data. Keychain stores passwords, certificates, tokens, and signing identities behind the user's security boundary. Prefer Keychain or a secret manager over plaintext shell files.
Gatekeeper, notarization, code signing, and privacy permissions also affect how applications run. Security controls should be part of the development workflow, especially for tools that handle wallet keys or production credentials.