Polaris web components password input autocomplete defaults to "on"

How come autocomplete is defaulted to on? With the default, when I focus the input, I see plain text autocomplete suggestions, and the value gets saved as an autocomplete option. This does not feel secure for passwords.