They could provide a the public or a trusted third-party with a database dump, or put it on a separate hosting service. With a bit of effort either course would

They could provide a the public or a trusted third-party with a database dump, or put it on a separate hosting service. With a bit of effort either course would relieve them of security concerns