Storing sensitive data (usernames, passwords) in a Grist database a good idea?

Is this a good idea? Is the information stored in the sql database encrypted somehow or is this a security risk? Note: I am talking about a self-hosted Grist instance, hosted on a public VPN (connected to the Internet) and other working on my Raspberry Pi on my local network. Thanks!