Unfortunately they wouldn’t have access to the registry. But with enough determination, they could still brute force your password by returning repeatedly