Re: Grab the private key?
Who exactly can grab this private key, and how?
Anyone with a copy of the Atlassian Confluence desktop application, by debugging. The private key is embedded in the desktop app.
This is a classic error, and per the Twitter thread, there are likely many, many more offenders.