You've missed out a vital thought there. The sensor sees "HelloWorld" because [password] is not part of the string, like the <Style> formatting.
If this suggestion were in place, the sensor would then be comparing "[password] Hello World" and "Hello World", which then fails.