The difference is that keys and passwords are managed in a more careful way (think encrypted key stores), whereas URLs are not handled with the same care.

Apart from that, I agree with you.