> It confirms exactly my suspicions - there is absolutely no security with Firebird.

Hm, I really don't see how this is Firebird specific. A security system only works as long as you don't have physical access to the server, which is true for any kind of server, not just database systems.

What you really need is an embedded database with password-based (or certificate-based) *encrypted storage*. Obviously you shouldn't store the password anywhere in the host system (including the program executable) or it's all for nothing. Likewise for certificates (use a secured certificate store).