“More than half of the websites in the study accepted passwords with six characters or less, with 75% failing to require the recommended eight-character minimum. Around 12% of had no length requirements, and 30% did not support spaces or special characters.”
At least on Firefox, there’s a flag you can change in the browser settings to make it so nobody can disable pasting to text fields. It has made the banking experience a lot more pleasant for me. https://www.howtogeek.com/251807/how-to-enable-pasting-text-on-sites-that-block-it/