What is a common mistake with Kubernetes ConfigMaps and Secrets?

Storing credentials in ConfigMaps, committing Secrets to Git in plain text, or assuming base64 encoding is encryption are common security mistakes.