.env is safe? Can't steable?

.env File is safe ? because some stupids saying ‘We can steal your Bot Token bla blabalbalba’
its possible ?