i cant agree!
if you have an encrypted wallet, you can access it, but when you move funds, the password needs to be submitted!
and this is for all wallet.
BitCoin core QT, also!
I'm saying that OP's private key or seed might be compromised so the hacker could move his funds easily as he just needed to create a new wallet, so no need to import any password at all. Does it make sense now?
We should always secure our crypto and if you really want to do it then grab a hardware wallet o keep your crypto safe.
Hardware wallet might add an additional security layer, but don't think you'll be immune just from that. You need to be careful as there's a lot of way to hack and steal your crypto.