It's insecure because anyone who intercepts the message can trivially decrypt it by pasting it into their browser.
Yes, self-destructing messages are more secure than simply pasting plain text. But it's offering no protection against eavesdropping, so it's not secure.
