In practice as a developer you have to resort to JavaScript hacks and obfuscating form field names to avoid it.
I figure most people just tolerate wrong inputs and live with the results. (It doesn't happen that often.)
> It's very hackish way but I found a trick to achieve the same.
> So you should go to chrome://settings/addresses?search=address
> Now create multiple addresses, each with only one field filled. So one should only have your E-Mail, another record should contain only your first name only, and so on.
https://superuser.com/questions/477144/can-autofill-in-chrom...
A variation:
The PCI-DSS council is partly to blame here, for recommending autocomplete=off in other contexts.
Like are you kidding me? I went into my bank app/website, I used the "copy" feature, and I'm trying to paste here AND into your "confirmation" field. Because I don't want to typo it!
How could my copy skill be worse than my typing skill?