I've noticed this is a problem for anyone editing user profiles too. The username and password gets automatically filled in to the Address and User Salt fields at the end of the page.
This can lead to the editing user's username and password being leaked if they're not attentive because the user salt is displayed when you view the user's profile after.
I've noticed this as a problem since our site was 2.9, we're currently on 3.3 and it's still present.