An example file usually documents required names, not production secrets. EnvCheck turns both files into sorted name sets.
Missing means documented but absent
A missing name may need configuration, but EnvCheck cannot decide whether the example itself is current or correct.
Extra means actual-only
An extra name may be intentional, obsolete or undocumented; the tool reports the difference without judging it.