You have the option to encrypt your package file that contains your game files and code. Just like with Unity, if you don’t use any of these encryption features, yes, you can get the assets and source code back. But as mentioned, you can easily get things out of a Unity game as well. This isn’t a Godot specific “issue”.
And since it seems like you completely ignored it, I’ll link this one again.