At least on the desktop they bother sending autocomplete requests over https. On android, autocomplete is a security disaster. the stock browser up to 4.2 sends anything you type in the addressbox in cleartext over the "wire". Haven't checked if chrome does the same thing but i would guess they share some of their codebase.

I think it's time to start compiling your own browser..