It can. The fact there is a password, even if you can trivially find said password, is considered a protection. The German law is completely absurd here.