The thing is that you are sometimes tricked into giving the password to someone who is posing as the verifier.