Yes, you understand correctly. The Spark library in Databricks uses the Unity Catalog credential model, which includes the use of "external locations" for managing data access. This model ensures that access control and permissions are centrally managed and enforced through Unity Catalog.

On the other hand, the Pandas library still follows the legacy credential model. This means that it requires different permission provisioning compared to the Unity Catalog model used by Spark.