[bkjsbkjdnf]

> The user is responsible for their password security and it should stop there.

That would be true if the user created, stored, authenticated the password himself.