Why Chrome’s autocomplete is insecure and how you can turn it off
Quincy Larson

There is other issue, related to auto-fill. HTML specification allows web developer to disable auto-fill by specifying : autocomplete=”off”.
However Chrome ignores this directive (some other browsers too). Long time ago I’ve reached out to Google dev team and explained how dangerous such behavior is. Surprisingly, I got the following explanation: “autocomplete=off is a soft directive. HTML specification just recommends browser developers to follow this rule. Google chose not to follow this rule”