Registration – Password exposed in hidden field

I’ve noticed when using the sign up template and with the custom password module turned on, if the registration form fails validation checks (e.g. an invalid email), the form contains the password in a hidden field:

<input name="user_pass" value="mypassword" type="hidden">

How can I avoid this an make it secure?

https://www.ads-software.com/plugins/theme-my-login/