There is a difference between passwords and certificates: you have to send the password over the network every time you login, whereas the private key is never shared.

But in general I agree with the rest of your comment.