MetaMask stores the PUBLIC KEY (address) to you can attach it to websites/dApps. But it doens’t store the PRIVATE KEY so in order to actually do anything you will be prompted to plug in the HW device…