Real programs often need secrets — an API key, a password — that must never be written directly in your code (anyone who sees the code would see the secret). Instead you keep secrets outside the code, in the environment, and read them at run time.

Because no API_KEY is set here, it prints the fallback — and importantly, no secret is ever in the code itself. The next lessons show how to set these values properly.