My guess would be that he is using one of the Microsoft cryptography libraries
which probably gives rather good security even if using an older library compared to obfuscation alone.

Doubt he wants to stand on a box and proclaim it is unbreakable.

If someone was determined I'm sure it could be broken, but for normal use that
most of us use it for I would doubt any of us or our users are going to easily
decode it.