CNBC password tester: HTTP, shared with advertisers, stored on Google

Is it really so simple that it was a password testing tool or was it maliciously and surreptitiously sweeping up naive readers' passwords ?