Agree with everything beside the third point. The argument of passing plain password over the wire doesn't make sense: every login form when you submit it pass

Agree with everything beside the third point. The argument of passing plain password over the wire doesn't make sense: every login form when you submit it passes username and password over the wire! Nobody encrypts the passwords client side.