It definitely is. .k8s..com regularly confuses what password I want to use if I have different authentication per ingress. More commonly if I run something else at ..com firefox and chrome are both happy to offer up my password for ..com.

Closed. Wont fix.

I expect they can bury you and your lawyers in made up paperwork to the point you'll go broke *long* before them, so why try?