I only assume that Squarespace is either having support people follow a script, or is training them well enough that they don't need to follow a script. Either way, they shouldn't be asking for passwords.

Other people seem to be assuming that Squarespace is having untrained people do support, which is a much more damaging assumption.