I agree it should be hidden. There is an issue tracking it here Mail password in advanced properties shouldn't be visible · Issue #3027 · duplicati/duplicati · GitHub
And a greneral issue tracking hiding all passwords from the frontend here Fix not revealing stored passwords from the UI · Issue #2024 · duplicati/duplicati · GitHub 