: It contains private keys, addresses, and transaction history. Anyone who gains access to an unencrypted wallet.dat file can spend the funds contained within it.
Unless a folder is explicitly protected by robust authentication, consider it public.