Yes. The same as Chrome. As it should be. If they weren't in the UI, you could just extract them from the browser's data files or process memory. All that preventing access does is annoy users and give them a false sense of security.