Yes; it's because your wallet is decrypted by the client and your password is never sent to the server.