AWStats is a CGI script that has some bugs in its past that can allow for remote execution or other problems, that is the biggest reason for it having the login requirement, and it can't be disabled.
Webalizer runs on the server side and dumps the html output, so it doesn't run on demand.