Although you highly recommend to delete the backups after downloading them, I think you could add some simple features to enhance the security of the system:
1) Add a password to the zip file.
2) Storing the configuration parameters on the Database
Hope this could be useful.
