When entering the password into Up2Date, it is echoed to the screen as clear text and not as asterisks or whatever.
This is arguably bad, I agree, but not seriously so. I have changed it for the next release.