So I am coding a helper class for Google Analytics borrowing from Google’s own iosched example. What I want basically is to have the helper class auto set the UA string. But which choice is correct?

One could store the UA string as in res/strings.xml. One could also store it in a plain java class as a string. We cannot store in the assets folder obviously as than it would demand that be world non readable which a good many goof up.  You would still use try/catch and java reflection to grab the getUAString method but form a security stand point which would be more secure?

My instinct tells me the java class with the UA getString method will be more secure than storing it in xml  at the moment.