>if they were, you wouldn't be able to access them from a new device after authorization with a password.

Telegram isn't great but if your password was used to derive the encryption key, that feature would be entirely feasible.