It's not secure! The string can easily be extracted without even need to decompile. Trying to hide your endpoint inside C/C++ code is completely meaningless. String will still be string. Try using `strings` command for extract string from binary files. https://stackoverflow.com/questions/8148841/how-to-extract-hardcoded-strings-from-a-binary-in-mac