Is that actually true? I recall hearing that it will stop sending as soon as you type "https", for exactly that reason.
(I do avoid Chrome because I dislike Google's corporate policies in general, but I think the individuals comprising the Chrome team are generally quite great about privacy issues like this.)