I agree with the general rule, however checking the dev tools this site doesn't actually make any calls to a server during or after you've typed your password.