Yep, it reveals the password.
But my database is in the cloud, so I can't use Windows authentication. In a production environment, this would be fine because we would all be following best practices and using mixed-mode authentication, with users authenticated by their domain login. So no...