Comment by Someone1234

So they do, in fact, do that and you have a workaround? They won't autofill on a phishing site, thus the copy/paste bypass.

It is a pretty big red-flag.