While I agree the URL for the "normal" users is just meaningless ballast, I don't understand how this is great for security. So what, now "normal user" Joe wil

While I agree the URL for the "normal" users is just meaningless ballast, I don't understand how this is great for security. So what, now "normal user" Joe will still input his Paypal's user and password, because the web page clearly displays a very nice PayPal logo and has the same look&feel as the original page. What is to be gained?! I feel like it is just an attempt to dumb it down and put even more power in Google's hands, transforming http:// http:// into google:// No, thank you.