As already mentioned, the bottom line is all that you can insert, baddie can break right away, so all you can really do is do the work necessary for this, an obstacle for anyone who even tries. What has been proposed so far will at least remove the random thief, and maybe that’s enough.
The way I found around was that there really was a pretty tight integration with the server-side data, so even if you removed all this integration (which is likely to take several days ... it large application) will still not have any data with which you can use it. It clearly depends on what your application does in the first place, but if you make an architectural decision to move any data to the server side, this will increase your protection.
(This should be a comment, not an answer, but a post here because of the length.)
BinarySolo
source share