See #3420

By default, the direct usage of SQLite it is not encrypted. Developers should therefore be caution when using the API.

For the Demo I'm thinking of using a user table which contains access token and PII. The data will be stored in plain text in the sandbox.