Absolutely correct. Even so, cryptography as something you HAVE/KNOW however, gives a much higher degree of verifiability than a centralized and administered database.