I once clicked into a corporate login window and typed my domain password, it completely ignored my click and I ended up typing my password to a coworker in Slack.