It would be better if you simply write it in a text file or directly in source code.
When writing in environment variables your whole OS and all programs can find and read it really easy. So could viruses and such things do. And you will probably forget the key in your system when moving the bot to another system.
It's simply a security issue.
That is my answer. There are surely many more reasons.