Hiding the underlying exchange of data from the user does not mean the data is unstealable

With your logic nothing is unstealable. Go and watch film inception.

The main point is the average Joe it works seamless. And average Joe won't have to remember things.

Yes, it does. Not everyone wants to maintain password database.