There are times that the end-user browser (and password manager) autocomplete facility is a complete disaster. Example: The User Login form, where some security policies really want the user to enter a password, not have one cached from the browser.

Detailed analysis of the existing usages \Drupal::url() — 461 occurrences t('foo bar baz', \Drupal::url()) (e.g. /ViewsBlockBase.php:1) test assertions (e.g. core/modules/user/src/Tests/UserPasswordResetTest.php:224) hook_help() (e.g. \user_help()) redirects (e.g. new RedirectResponse(\Drupal::url('', [], ['absolute' => TRUE])); -> solveable twig variables (e.g. $variables['book_url'] = \Drupal::url('entity.node.canonical', array('node' => $book_link['bid']));)