Makes it way easier for nefarious persons to dupe others with lookalike sites mimicking, eg, google login. People should always check exactly where there's sending login credentials to, or risk account takeover.