Secret objects in Prefect are used to provide sensitive information to the workflow like authentication parameters of any third party app. Is my understanding correct?

Yep!