Yes, I even think there's a large amount of users that, when shown a random popup "please enter your password to continue", would just enter the password they use for every service, making phishing quite trivial.