Not necessarily. You can encrypt the search value clientside and search by value in its encrypted form.