It is encrypted and can only be decrypted with your password, but it's much easier to brute-force guess most passwords than 64-character metamask wallet private keys.