I am concerned that the Api-key / Login details that are entered within the Unity editor Cesium windows were not secure and potentially accessible if the built .exe was to be decompiled.
Hi @JohnCarpenterEleco, welcome to the community!
I hear your concerns about security. In general, Cesium ion access tokens are not meant to be private; they are sent over the wire to authorize data retrieval in the first place. However, there are safeguards in the ion UI that help you view the use of any token. You can restrict a token’s access to assets, etc., and in case of a compromise, you can also revoke and rotate the token.
If there are further security concerns, one possible solution is to set up a service that returns a Cesium ion token. An app could consume this service, receive a token, then set that token on any tilesets / raster overlays at runtime. That would prevent hardcoding / embedding the token in the application, and would also allow the token to be rotated.
Let us know if you have any follow-up questions!