WCAG 2.2 published as a W3C 'Proposed Recommendation'
Don’t make people solve, recall, or transcribe something to log in.
Amen to that. Websites that don't allow you to paste a password are the absolute worst, good to see the W3C acknowledging this.