SSL is not only important for submitting data (logins, passwords, etc), it is also important to ensure that what you’re getting back from the server is unaltered. Non-SSL transmissions can be modified on the wire, which means you can’t trust what you see in your browser. For example, there was an airport a few years back that got into trouble for injecting ads into websites for people browsing on their free WiFi. This example is rather tame (annoying ads) but you can imagine injecting more nefarious things into the payload: keyloggers, re-writing forms to submit to 3rd party servers, etc. SSL prevents tampering with the raw HTML/JS/CSS that the server sends to your browser.