When I was switching to flakes I was also wondering about this issue so I opened a thread here which evolved into a wiki page. Maybe that can help you decide.
Currently I am using git-crypt to store my wifi passwords in the git repo of my system flake.
EDIT mid 2022: I have since switched to agenix because flakes and git-crypt did not work well together.