This is likely a direct symptom of the code being developed by someone with very little to no experience in HTML forms.
Which implies, but does not prove, that there is a high likelihood that the password is stored in plain text somewhere in whatever persistent backing store is used for the site.
2 comments
[ 2.9 ms ] story [ 8.7 ms ] threadLocal pizza delivery ordering site. Actual site is stephanies.co, but ordering is through "letsget.net".
Which implies, but does not prove, that there is a high likelihood that the password is stored in plain text somewhere in whatever persistent backing store is used for the site.