I accidentally hit this question from Google Search (written in code on purpose to prevent others to open it) while logged in on SO.
https://www.lirik.live/soal-https-stackoverflow.com/questions/72185081/hide-show-parameters-based-on-a-condition-in-azure-devops-pipelines-yaml#
After a while, I noticed I wasn't logged and was about to enter the credentials, but luckily I double checked by chance since the browser could not auto complete the login.
I am not sure I can do what is stated here since to me this is also able to capture the credentials since it owns the domain. What should I do?