I always associated these with key logging prevention. What drives me nuts however, is websites/apps that allow me to type my password but not paste it. Like they want to force that a keylogger can grab it?

Another favorite of mine are password conposition rules, which do nothing but reduce security and are everywhere :(