I like the sound of most of that, especially the two-factor authentication on all accounts. One thing wasn't clear to me, "Wallets (and private keys) are store

I like the sound of most of that, especially the two-factor authentication on all accounts. One thing wasn't clear to me, "Wallets (and private keys) are stored using AES-256 encryption." Are individual users wallets stored with a key derived from the users password? Or, rather, could you act, under coercion say, to transfer my funds without my password? (i.e. in a "bank robbery" situation)