Why would any site do that? Other than in a banks website I haven't encountered that behaviour previously
Banks are the worst offenders, but it isn't limited to that. Any site that thinks it is "special" and requires "extra security" targets password managers for reasons unknown.