And can they do that without the risk that the original owner still has a private key or password with which to transact?

It can always be traded custodially. But that means trust is involved.