[stingraycharles]

The standard answers for these things is to use both; they’re not mutually exclusive, and for important things you almost certainly want both.

[staticassertion]

The expansion mentioned in the article is explicitly passwordless.