I suppose it could be worse. They could clone #PayPal. It's been a few years since I closed my account, but at the time, #PreyPal used #JavaScript during password change time to prevent you from pasting a password in from a password manager. I can't remember whether they also prevented pasting during the process of logging in.