I read that to mean in version 18 the HTTP interface will no longer work. The following two examples ARE HTTP so it is telling you that these two examples will no longer work when you get to v18.
Nope. There is no difference (from Kodi’s perspective) between a browser or curl hitting that URL. It’s all an HTTP GET call and both have the user and password as part of the URL (it’s called Basic Auth).