That is correct, there is a special boot mode enabled by the microSD card. (reviewhorizon.com)
Since your app won't be able to access Android's credential protected file system in Direct Boot mode, Android 7.0 introduces a new device encrypted storage area. (androidauthority.com)
Direct Boot mode allows apps to communicate and interact with us before we have unlocked our phone after a reboot. (androidcentral.com)