A mobile game stores high scores and achievements in a local SQLite database on Android. The developer argues no encryption is needed since high scores are not sensitive. What is the security concern a reviewer might still raise?

• A.A) Unencrypted SQLite databases are excluded from ADB backup, creating data loss risk
• B.B) A rooted device user can modify the SQLite database directly to cheat by manipulating scores; if the app performs server-side validation, this is low risk, but if rankings are trusted client-side, game integrity is compromised
• C.C) Unencrypted SQLite files cause memory leaks in the ART runtime on API 30+
• D.D) SQLite databases without encryption cannot be opened if the device uses File-Based Encryption