If KeePass's database file wasn't secure on it's own, then it would be quite useless.