Yeah, comments are the easiest thing to hide data in, but anyone who looks at the source will see them. If you want something less obvious, consider hiding bits in the whitespace or in the way you format your code—those changes are harder to spot but still visible to a close review. For true stealth, you’d need to use a separate channel like a side‑car process or covert network traffic. It’s all about the level of risk you’re willing to accept.