Yep. Sure it has a to hit roll, but it doesn't do damage. If I use harm on a commoner with say 5 hit points, I drain all but 1d4 hit points. If I use it against that epic level barbarian with 500 hit points, I drain all but 1d4. I don't roll dice to see how much damage I do, I roll to see how...