If someone hacks the database, it's sort of a moot point, don't you think? You've got to figure they're proficient enough to workaround / discover your encryption key and get the data.