Secrets in KeyVault with TFVars File referencing the secrets - Terraform

Is it recommended to store tfvars files in azure devops if the secrets in the tf vars files are coming from Key vault?

From reading the best practices, I have found that it is not recommended to store tfvars file in version control system such as Azure DevOps since they can contain secrets such as db connection string. But if I dont store the file in VCS, then what is the best way to configure pipelines in Azure DevOps ?