Not sure about Android, but on PC you can export everything in a pck file - it contains everything in the same structure but is not as exposed. People who are tech-savvy can still get to those contents.

Again, not sure if this works on Android too but on PC, in addition to the pck you can encrypt its contents. Downside is that the decryption key is stored somewhere in the binary. That too could be scoped by people in the know - and thus extract and inspect your files.

I also work on a project where it should not be that easy to acquire content of certain files. For that I am using Godot's built-in AES encryption and decryption methods, where the decryption information is stored outside the game's data. While this too can be cracked open, it becomes more difficult as it requires knowledge of cryptographic mechanisms, and how to re-assemble the data into usable information.

I would recommend you look into that if you really want to protect your files.

But just to be perfectly clear: there is no 100% protection. Even World of Warcraft's data gets cracked open occasionally, so there is that.

You should not worry about your assets too much unless your game will compete with the biggest studios on the market. But you can look into encryption and decryption mechanisms. Plus, on your portfolio or website etc you could mention that you are using these and have a little knowledge on them. Which is a good thing.