It protects against exactly one more type of vulnerability than the normal login method, so it's still better.