There is an idea that passing secrets via environment variables is more safe, than passing it via command line.
Ansible has few methods to accept password: