As of LCOS version 9.18 RU1, the storage of passwords in browser login forms can be suppressed with WEBconfig.