"...The file is saved in a location accessible to any app..." no, it's not it is in the user .confg private and hidden dir , plus the permission on that file are 0600, so... if you want to compromise yourself have at it...lol