I connect daily directly to the MySQL Database at my ISP - but I use Plink on my Windows PC to create a secure connection first so that the database login details are encrypted.

I suppose also that if you are using FTP to connect to a server at your ISP then at least the login details are not being sent across the open internet (ie. they will only pass between your PC and your ISP). All depends on the various network configurations I suppose.