[ironmagma]

...when in reality, all that was probably necessary was some password strength requirements including a check for previously leaked passwords.