It _wants_ to autofill, but it doesn't without the user actually confirming the autofill. Pretty important distinction to make I think
Also, the confirmation requires authentication (at least by default, unsure if this can be changed).
> The phrase “welcome back” on a page causes Safari to autofill a password