Comment by JacobSeated

Supposedly the security issue is about copying and pasting passwords.

Trust me, the alternative is much, much worse. You do not want users using the same password everywhere.

I use a password manager, passwords are encrypted and only briefly available doing the copy / paste operation. It also has an auto-fill option which further limits the attack surface.

KDE is much more respectful towards users, because you can actually remove/add the "always on top" flag as needed, and that IS the way it should be.