If you lock your password database with a long, secure password that you know, then you are still doing it "right". If your password database is not encrypted

If you lock your password database with a long, secure password that you know, then you are still doing it "right". If your password database is not encrypted with a strong passphrase, then you are right, they both become "what you have".