Even if it is https, anyone who has access to one's browsing history, will have access to the username and password too.

Consider the number of browser addons that have access to these...