Yes, but it doesn't need constant attention. A small router can be dropped anywhere and route the information to the attacker long after (s)he's gone.

That said, finding the AP and disabling it is better than randomly throwing deauth packets.