This is how people "try" all passwords they use on a site. If the site is evil, they can store all your attempted passwords and use it to gain access to other accounts you own.
Why not use a password manager?