It's more secure because it's resistant to MITM attacks or a compromised host. Because the password is sent, the private key isn't.