Hi Ken,
This is expected behavior in CWMS. If you schedule a WebEx meeting (with Web and Audio available), password is enforced only via WEB. There is no password/PIN for just dialing in to the meeting. Audio meeting restriction is included in Personal Conference meetings, where hosts and participants get access codes they are required to enter when joining the meeting.
I hope this helps.
-Dejan