The theme doesn’t do anything special to password protect the content. Replacing the content with the password form is standard WordPress functionality and the theme just inherits it. If you need more advanced protection you can try the Private Only plugin. It allows you to protect certain posts and pages or the entire site. I use it myself for private websites and it works perfectly.