@AmeliaBR totally. I may have missed it, but I didn’t see in the spec that a UA must make clear that a field has been autofilled. That said, I could imagine it being a security concern if it doesn’t. Certainly warrants more discussion with the design team.