Well, it is little complicated under the hood. Server must remember jobs which served you, to be able to perform some checks on share submitting. As the server has limited memory for every worker jobs, with knowledge of user/password, the attacker can make your mining impossible by erasing your worker queue. Well, it is nothing to too much worry about, but posting your full worker credentials on the web isn't generally good idea.