It would be very useful if Arm could scan / detect files (csv, txt, powershell etc) for username / password combinations in any form so we could detect/remove any offending items.
That's not the scope of ARM.