terraform show -json Is an Automation Interface With a Security Footgun
The JSON form of a plan exposes structured resource actions, configuration and state for automation. It can also expose sensitive values in plaintext, so policy tooling must treat it as protected data.