So a clear protocol that isn't using a password is worse than an encrypted one, also without a password?

sure. see also: can used kerberized telnet to require authenticated connections. a good idea on a university network where anyone could log onto my empeg!