Export collection shows password

A colleague at work exported a collection for me to use as an example of running Postman using SOAP. I imported it with no problems, but I was very surprised to see that, under the Authorization tab, I could see his userid and current password.
Is this deliberate or an oversight ? (Let’s face it, I think it’s fair to say that it’s pretty easy to forget to blank the password out before exporting)