If you have time to examine the anti-phishing bar to make sure your last login date is correct, why wouldn't you have the time to check your address bar? Surely it would be easier to check an url than to remember when you last logged in.
Because people are dumb and don't bother looking up. It doesn't provide much additional security to those who already check addresses, but most people unfortunately don't. You have to force them to do so - and bring it to the center of their attention.
Also when you already provided your login details to a phishing site they can just fetch this bar from the real website I guess.
This is in the home page - before you enter your details.
