Gday ,
I have all the SQL running in my gameinstance and access the data through there, so as far as I can figure unless someone actually hacks the server and gets access directly to the SQL it should be fairly safe. I am panning to use AES encryption with private and public keys for sensitive data like passwords, etc. but unless someone is sniffing as a man in the middle attack that is probably not necessary but belts and bracers as they say 