HOWTO: Get Application Specific Directory -ASD (where one exists) without Extensions

Of course, the user can delete any file on his device from the external storage (also from the ASD). See e.g. here. The only files that the user cannot access without rooting the device are the assets.