I'm struggling to figure out what the problem is, aside from UX annoyance (like the IDE panicking before you close a brace or sth). Eventually whatever you end up typing is being sent to the server anyway, and if that's not inherently problematic, what's the problem with intermediates being sent? Is the problem XHR requests on events other than clicking? Why?

[–] DSTGU@sopuli.xyz 3 points 1 month ago

It is implied that it was made using comparing to a plaintext password sent back from server to the user's browser to compare.