No, this did not happen by mistake. It is plain and simple that they don't have focus on security.

There is no true need for the cleartext password to leave the users browser.