Agreed it is a big hole for a specific set of apps where you don't want the browser to save the credentials.