Anyone can read the answers from json file, so I'd suggest at least obfuscating them using a simple base64 encoding.
Much better: use a proper secret encryption key in the repository (CI can decrypt during the build step) and provide a CLI wrapper for easier decode-edit-encode cycle