This is to protect against shoulder-surfing. Having the information present on the client and accessible to the user while appearing redacted is very much the point.