Even if this is a completely trusted and secure site, why would you not use SSL for something like this?

Transport layer security is a serious issue, especially for people prone to password reuse.