...user types in a password box and *thinks* its secure because they cannot see the letters they are typing. On a public terminal, sure. On a personal mobile device, why?