> Is `git status` / `git diff` etc relying only on the timestamp of modified local files to decide if a diff is needed?

Of course. There's no other way to implement these commands efficiently.

But you don't even need to play with timestamps. You can ask git to pretend not to see the changes:

  git update-index --assume-unchanged password_change.cgi