"2. Use specialized mobile keyboards" is a bit confusing. Should be type=email of course for email, which should by default sort out "3. Validate fields immediately"

I feel browsers should do "6. Let users see their password", not the Web app.

Could probably be improved by https://html.spec.whatwg.org/#autofilling-form-controls:-the...

Some simple HTML on display would be nice.