Keep in mind, though, that in writing articles, you focus on the technology that the article is primarily about. While I agree with you about securing the connection string, the truth of it is that with respect to this article it's a rabbit trail. Explaining why it's an issue and various ways to secure the connection string would double the length of the present article, if not more. In the mean time, the focus on using Perl to connect to SQL Server is lost.