I suspect there are bots that go looking for forms to fill in without knowing what the context is, i.e. they'll target anything with an input tag.