> 2. all someone has to do is copy a passworded database to another server - with a password that they know - and they are in! Seems rather pointless using passwords at all.

Yes. If you allowed an enemy to get physical access to your server,
you've lost. Just don't do it.

SY, SD.