The password field on login forms is prefilled with exactly six '*'

For example, on the vanilla _scaffold app login:

<img width="900" height="436" alt="Image" src="https://github.com/user-attachments/assets/8a3d6b71-5631-45d9-9185-3457dca85cb7" />

This happens on different browsers / O.S.