I don't know if this is by design or not, but for any given website, if I had a password that I deleted into the trash folder, it will still autofill.