Just FYI, I've worked with this "security" company a year ago and they suggested in one of their pentest reports that a password field not explicitly disallowin

Just FYI, I've worked with this "security" company a year ago and they suggested in one of their pentest reports that a password field not explicitly disallowing autofill (built-in browser password management and iCloud Keychain) is a security risk, against all advice that password managers are a good thing and their use should be encouraged.