When making a new custom field in the browser (firefox) extension, the default type is “text”. Users may not manually switch to “hidden” in the process of making a new field, either because they’re not sure how exactly “hidden” works (does it apply before or after pressing “+”, etc) or just because they forget to change it. This may lead to some sensitive information like API keys accidentally being in plain text.
This is s security app so I think this should be fail-safe. In case the user does nothing to the selection box, it should default to being the safest option: “hidden”. Since I like to store things like API keys in these custom fields, it can also be a bother to manually change it to “hidden” every time. There should be little issue with “hidden” being the default option instead of (plain) “text”.