[OldSchoolJohnny]

What developer in their right mind would ever log a password in the first place? Are we devolving as a profession?

[Michielvv]

Can be more accidental. e.g. dumping full POST data in a more generic way (e.g. on exceptions) that happens to also be applied on the login page.