[gcbw2]

consider the following example:

You are going to visit example.com, a site which you have an account.

You think your clipboard have the string "example.com". But while the browser opened, you clicked your password manager and already copied the password for it. (or for the sake of the example, you might have been typing an email you didn't not want to share, maybe it had financial information about your IPO... I am going with password as it is clearly something you want and need to keep private)

When Chrome opens, you click the address bar and paste. See your mistake, press backspace a few types, type example.com and press return. Now google has on it's logs (and associated to your user profile) your example.com's password and you never had any feedback that it was sent, unless there was search results for your password (let's hope not)!

Had you used firefox with autocomplete off (which you should) you would have seen the mistake before pressing return. or if you did press return, it would have been very clear to you that you just sent your password to google.

So, defend it all you want, but it is a dark pattern that logs everything you type on a somewhat unrelated field and only show you feedback on certain cases. It is worlds apart from typing your credit card on amazon!