Yup, explicit TVS or just diodes doing clamping or whatever. There's a fair bit of protection circuitry around. Often there's series resistors which help a lot, too.

Not to mention that all modern CMOS chips have protection structures on the input (though not really as good as you'd like for something that is randomly handled by charged up humans).