I don't mean to imply that it's necessarily the fault of the individual. Even it the password did get entered into the username field (for example), it could be

I don't mean to imply that it's necessarily the fault of the individual. Even it the password did get entered into the username field (for example), it could be that an autofill bug, or just bad UI was the cause. If this was the case, though, it means that there's there may not be reason to assume that passwords are not stored safely.