Or disabling paste in password and bank account fields. Which is a literal crime in the US but never enforced.