Yes, anyone with enough knowledge to know where the script is located, could possibly view the contents of the script.

Typically people package scripts into an .exe in an effort to hide information, for example if admin login info is being passed at some point.

But like Mart said, if there is nothing in the script worth attempting to hide, you could eliminate the packaging process by just leaving it in the .kix format.