This would be quite hard to maintain. Instead they could create a "password complexity requirement specification" to allow sites to embed a universally machine

This would be quite hard to maintain. Instead they could create a "password complexity requirement specification" to allow sites to embed a universally machine readable description of their requirements, which all password managers and users could benefit from. I don't know if any such effort exists already.