Yeah, this has been true for a long time (possibly since inception?). Encrypted sqlite file sitting right next to the key to decrypt it.