I would think that in order for a password to be effective, the data would have to be encrypted... otherwise there is nothing preventing you from going "around" the password. But I do not know much about how that actually works... I only have my assumptions.
Does kindof make you wonder what the "secure" part of secure digital is supposed to mean.