When trying to debug a database error, I exported a site but could not find the database, as it was a hidden file. I looked through the documentation but found no reference to its location.

Looking more carefully, I found it at /wp-content/database/.ht.sqlite. It'd be great at minimum if the documentation mentioned this.

Other considerations:

• Perhaps we shouldn't prefix the database name with .? I found a reference to the .ht prefix preventing Apache from downloading files, but a) we're not running Apache (and one can download the file by navigating to the direct path), b) being hidden makes it slightly harder to find.
• Perhaps we should have an option to "export database"?
• If we want to prevent downloads via direct navigation (not sure why), perhaps we should do so a) in a way that works, b) with explicit configuration, and c) without obfuscation techniques.