As a suggestion to developers, why not allow the user to make the decision about security. If it is technically unfeasible to have a non-display field as a user selected option capable of accepting a pasted password, just give the user a warning that the pasted password could be viewed by others who could see the display and ask "are you sure?". If I reply YES, then allow the paste.
Fair warning. If this feature is NOT in the next year's product I will be investigating other solutions for my tax prep.
