The difference is that the key was not encrypted with the password. If the key were properly encrypted (as you describe) the password check could not have been

The difference is that the key was not encrypted with the password. If the key were properly encrypted (as you describe) the password check could not have been bypassed.