Not only because of the risk of data being intercepted when sent to the server, but also to mitigate the risk of a MITM attack.