See https://github.com/OWASP/mastg/issues/3420 RoomDB (https://developer.android.com/training/data-storage/room) is an SQL abstraction used for relational data. By default, it is not encrypted. Developers should therefore be cautious when using the API. For the Demo I'm thinking of using a `user` object which contains access token and PII. The data will be stored in plain text in the sandbox.