Certainly, as I may not have expressed myself clearly.
Anybody who can view synthetic tests within Kibana appears to also have the ability to not only see the names of the defined parameters, but their values as well (at least, this was the case in 8.7.x; I haven't confirmed with 8.8.x). I referenced this in passing in another post, but it was a throwaway remark and wasn't germane to the overall question, so I dropped it.
Since this is insecure, I made the decision to use environment variables instead, thinking that the journey would inherit the pod variables, not my local variables.
If this is the expected functionality and not just something about how I happen to have my permissions configured, then the way I would expect it to work would be that any user with access to Synthetics can view the parameter names, but only admins or those with specific permissions can view the values.