Hard coding is vulnerable because source code is shared and stored in unencrypted manners. If you put keys and secrets in your code, it becomes accessible and readable to anyone that sees the source code!