This is the worst-case scenario, in which a textfield is type="email", which would allow mobile devices to expose email address.