Unfortunately, there really is no such thing as “secure” without qualifiers. You need to consider your threats and risks in order to make this decision.
What information are you trying to secure? Who do you expect to try to compromise it? What would be the consequences of a leak of supposed-to-be-private information? How irreparable would such a leak be? How much are you willing to inconvenience your users to reduce risk? Etc.