If it were up to him, the www would still be plain text and images. His philosophy boils down to "Lets design all websites to the lowest common denominator", which is fine if your website needs to have the widest possible audience, but most don't, just like most other forms of published content.
Just think. No password masking+browser form persistence features means that I just have to be able to go to, say, gmail on your machine, double click the username field, tab once, and I know your google password. Then I can go to the coffee shop, log into your blogger account, create some nice posts in your name, then log into your analytics account do some bad stuff there, etc.