How are they restored? Is it password-encrypted?

Yes, you're given a random password when you enable backups that you need to use when restoring. They don't get uploaded to the cloud. On iOS there's no backup feature at all AFAIK.

you copy them to your new phone. yes.

And local.. whatsapp tries to get you to send unencrypted backups to google drive.