> I suspect SPP (which I agree is silly) derived from an understanding that allowing an average person to paste passwords meant they stored them in passwords.txt on their desktop

That's a significantly better practice than using the same easy-to-type password on every site, isn't it?