Repeat after me: Blocking paste on a form textbox is not a security feature.
@nzakas @lisamelton AMEN! (I'm not religious but that's how strongly I agree with your statement. 😀)