They might encrypt it with a passphrase but that's almost equally as bad. Good job on noticing!