I guess this is software's version of security theater. Make the users feel like the website is secure because there is a javascript running on the login screen

I guess this is software's version of security theater. Make the users feel like the website is secure because there is a javascript running on the login screen to prevent you from pasting, never mind that you can probably not use pass phrases or spaces because the backend was built in 1995. :)