possibly intentional: https://www.nngroup.com/articles/stop-password-masking/
And there the point to stop taking that article seriously.
The MS Solution is good though. I think it is the best. Better than the android/iphone flash up the last char for a second thing.