Can Transients be used to store sensitive data?

Yes you can, transients is on your server, not accessible by front end client.
You can use also update_option()
https://codex.wordpress.org/Function_Reference/update_option

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)