Reverse engineering LUA code

I have a password embedded in the OnStartup section of my project (SUF9). The password is used later on in the project with the built-in Blowfish encryption. The project is built into Setup.exe.

I know I should not consider this a secure environment, but I was wondering how easy or difficult it actually is for someone to decompile my Setup.exe and get the password? Are the EXEs compressed or encrypted as well?

Thanks.