Comment by CWuestefeld

I wish they'd also added:

Verifiers SHOULD NOT prevent users from pasting secrets from the keyboard.