Ditto for credit card number entries. I use Dashlane to copy my CC info out of, and if that doesn't work, there is a good chance I'm not buying on your site. Maddening and pointless.

I agree this is probably product managers, but may also be engineers who have strongly held "security" opinions and nobody to check them.