Deleting saved sessions doesn't require 'Master Password'
I've got the WinSCP Master Password enabled on my setup but I was able to delete saved sessions without typing in my password. I hadn't typed it in between opening WinSCP and removing the session either.