product-security@apple.com said
"After examining your report we do not see any actual security implications."

webkit community said
"I think it might be impractical to make the passwords “secure” in this particular sense"

I strongly dissagree.

Indeed, this is the most commonly-reported misunderstanding of the browser security model.

If an attacker has unrestricted access to your computer, they can retrieve the data on it. See https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#What-about-unmasking-of-passwords-with-the-developer-tools for discussion.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot