PSAvoidUsingConvertToSecureStringWithPlainText makes unreasonable claims at high severity

Internal MS situation:

PSAvoidUsingConvertToSecureStringWithPlainText is now generating SFI/s360 work based on unsupported claims with neither Guardian nor TSA teams able to offer repo-wide suppression options.

This will expose secure information. Encrypted standard strings should be used instead.

Will it? Why is it an error?
I challenge you to create Credential instance from a token or another credential following this guidance.

There are workarounds of course and line-by-line suppressions, but they don't scale or make security story any stronger and we can't provide our own rules/settings for the linter.

先找出 PSAvoidUsingConvertToSecureStringWithPlainText 規則的進入點，並檢視其訊息與嚴重性是如何定義的。將這些說法與 issue 中描述的認證資料和權杖情境進行比較；完成的條件是該規則的嚴重性與指引不再對整個儲存庫提出沒有依據的安全性主張。