EPM related APIs "files security"

Summary

Does the APIs results files are encrypted somehow or secured against Oracle?

Content

I have a question related to data security from the REST API perspective.

As I see in most cases when we need to get some reports/data from EPM Cloud back to on-prem, we need to call some API to generate files with the data and then call another API to get these files.

As I see such files will be plain text (will not be encrypted)?

Could anybody explain the architecture of the storage where these files would be stored? Who can manage this storage? How long these files will be stored?