Is it a thick client app that you cannot use the password manager? Or just a web page that adds "onpaste=..." handlers to make life unnecessarily difficult? The latter can be "fixed" with some JS console magic.
Worth noting that Microsoft lets you set up single-machine passwords (they call it a PIN) that you can use to access a user account on a machine without having the password for the associated MS account. That way you can have a secure (and changeable) MS account, but the single-machine PIN can be something you don't need to copy/paste.
So the scenario is: somebody breaks into the house, sits down at the gaming PC, and is able to poke around the local network because the gaming PC has no login password?
I wouldn't say it's THE scenario, but it's A scenario.
There's a reason IEEE says it's best practice to give IoT devices a strong username and password and to segment them away from the rest of your network, right?
The Microsoft password is one I couldn’t just copy paste from a password manager and now I have to change and relearn it.
Damnit.