Cause TiBB admin are cheapskates and don't have an SSL certificate
.
You won't get hacked but don't use the same password here as you use for anything important
.
[edited to add] Of course, it's good practice to NEVER use the same password on two different sites, and especially not for your banking etc. but we all know people do it...