Thank you for linking to the NIST document. Note that this is only a problem for the local app product; Copy/Paste is allowed on the online version. My guess is that the PC code is so old and crufty that they are afraid to touch it, and the cost of getting it wrong is pretty high. I think they have decided that it is worth to Intuit to allow a little egg on their face(s).
(BTW, Intuit, this is more of a problem than you realize. "Say that you don't know much about security while saying the exact opposite.")
