> Got a keylogger or someone watching over your shoulder, and they now have your password even if the server is not actually asking for it.

If this happens you've lost already, -W or not.