I'm not sure the functions themselves are error prone. Typically, code managing the textfield knows if it's a password field. It's easy enough for other code interacting with the textfield to check for TEXT_INPUT_TYPE_PASSWORD. We could add something like GetDisplayText, to access the corresponding RenderText object function and get the obscured text, but I'm not sure that has much value.

I'm more concerned that outside code that interact with the textfield might forget to check that the textfield might be a password field.