Please stop inventing claims to disagree with.

I claimed your initial unqualified statement, that it uploaded your password, was inaccurate, with both an explanation of what it was doing and the claim that I had not seen any evidence of it doing anything else.

I did not claim the site was not vulnerable to MITM or other injection attacks.

I did not claim you should trust this or any other resource with your password or any other data.