Everything except a very minimal core is kept on an encrypted partition. Until the password is provided, most things can't launch.