A spammer snooping email traffic might be able to automatically gather hundreds of thousands of passwords and quickly exploit them.
Passwords should not be sent in a way that allows a spammer to easily reuse it.