If they can get your sqlite files, what makes you think they wouldn't be able to get the encryption key as well?