My understanding is: the IMAP client is hosted. The local app talks to a HTTP service, and doesn't have mail processing capabilities of its own.

This is correct. You have the option to disable it and use local IMAP if you want, but it pushes you toward using "Microsoft Sync Technology" which does exactly what you were saying/