Maybe we shouldn't expect the browser to do EVERYTHING

from here

Ed Bellis tweeted about some research into the security of password managers. Although I am a strong proponent of password managers, I also think you can't trust browsers - I'm sure you can do the math.