I imagine the user account still has a password, it's just getty is configured to auto login on tty1

Right...you still need a regular login user (and probably a good idea to have a password set)...also for things like sudo. But that facet wasn't one that actually concerned me with this setup