It's just the browser doing autocomplete on use of back button. I was just testing in Chrome, not sure about others.

I don't recall this being such an issue before, it may preferentially work on some field types.

I have now put autocomplete="off" on all forms that didn't have it explicitly on, and set the webstandards check tools to enforce this property to be set on all future forms. That's working.