[taurknaut]

Maybe it should. Discarding the rest of the bytes works fine for passwords, though. I guess that's just not sufficient.

[pclmulqdq]

In my book, discarding entropy is a generally dumb thing to do. Passwords are usually under 72 chars, but a lot of people use concatenations of usernames and passwords in their hash to get guaranteed domain separation between users.