Bitcoin Core also does not implement BIP39, Knots is not different here. Normally your wallet is encrypted using AES, you decrypt it temporary to sign transactions. But it is hot wallet, yes. If your wallet file is stolen and pasphrase is weak or your machine is hacked, you will have bad time.