Password and OTP blur
Passwords, OTPs, and recovery tokens typed in the form are masked in screenshots or session-replays, so these cannot be read.
This rule in both cb999 Login and cb999 Register flows has the same effect; even on slow Dhaka networks, personal data is not visible in user reviews.
