After fetching credential values from credential manager, a developer can easily view the password by using simple calculate stage.
We are giving access to developers to utilize them for their automation process design. If a developer really want to view the password, he/she can easily view it with this loophole.
BP tool should prevent casting from password-type data items to text-type data items.
Thanks,
Nagarjuna A