If you make something seem hard enough, the script kiddies will avoid you. That means you'll have the elites on you busting through holes you never thought were there. If you've been a hacker, you know what I mean. That's just not true. The fact is, no data is secure.
Somebody has to be trusted with access to it.
An unauthorized person can pose as an authorized person and get the data anytime. That's what real security is. It not about protection or keeping people out as much as it is how you authorize people to get in. At that point you are left with how the authorized people handle their access codes. Regularly used access codes, authentication codes, PIN codes, passwords, whatever you want to call them, should never be written down.