Although one must be security conscious, one should not get totally paranoid either.

Much will depend on the link to your remote DB. If this is over an internal network, there is not much use in creating a secure connection over your internal network and then sending the data to the user over a public network without any encryption.