

That kind off decision really should come from the gameplay mechanics you want to incorporate. I’d say the only reason to pick now would be to limit scope and stick with your comfort zone. I’d encourage you to not decide right now, but try to make the roughest prototypes you can of each, trying to establish the base of your gameplay loop in each “orientation” and then compare the two and see which has the feel you want to go for
I think there you hit the nail on the head! Just the fact that it is in there, whether intentionally or not is something that warrants warning people about. So that in the case someone goes to set up a server, they at least know that recently there was this rather severe risk of unnecessary credential exposure, again no matter if it was intentional or not.
However, I will say that I think I would have also opened the PR, not to help the original dev necessarily, but helping those that might come to use the software later.