Only someone with admin access can see the edit config section of admin
If your going to freely give people access to your computer then yes they can see those. We do not hide those because what happens if you forget your mysql password
You can easily change those to password boxes in your adm-misc.php file
EXAMPLE HERE
Code:
Content visible to verified customers only.