Decrypting .dat files

So someone who isn’t me would also be able to purchase a SD USB and be able to access them then decrypt them (giving that they have access to my backup) ?

Seems like a simple flaw…