A developer base64-encodes a password in a Secret manifest and concludes that the manifest is safe to commit publicly. Which statement corrects that conclusion?

1. Base64 is encoding, so the manifest still exposes recoverable secret data
2. Secret data becomes harmless when the filename ends in yaml
3. Base64 encrypts the value using the cluster's private key
4. A Secret manifest cannot be read outside Kubernetes