What I'm saying is that autofill is a current method of credential extraction that should be avoided.

You don't have to believe me, read the links.