Would it be secure? The machine still needs some API key to utilize it so that user can get the most of it. That key must be in machine in order that database

Would it be secure? The machine still needs some API key to utilize it so that user can get the most of it. That key must be in machine in order that database could be accessed. Whoever exploits that machine, is still able to get the same data as the user of that machine.