Bad minus being able to directly sniff your password equals less bad, not just as bad.