Is there any evidence of this? Especially for people that use a password manager, this seems incredibly stupid on Facebooks side.