Why are yml files in .gitignore?

[snugghash]

What possible security threat is making public the internal AWS subnet IDs, security group IDs, key name, and tag names?

Or is there a non-security reason for this that I'm not thinking about?

I'll likely add in include auto-setup scripts with example yml, and this came up. I'd appreciate an answer, not really urgent though.