A web page from 2014 summarizing an article not about the safety consequences of removing password masking, but the effect of removing masking on consumer trust. Performed and written by a UI guy. No link to the academic article it's referring to, at least that I found.

Summary: removing masking doesn't erode consumer trust if it's optional, but they get leery of you if it's off by default.