But if the average password length is 12 characters, does the maximum password length make any difference for the average user? More characters would certainly

But if the average password length is 12 characters, does the maximum password length make any difference for the average user? More characters would certainly be better for those users who generate super long passwords, but for the service as a whole I would think that setting a lower maximum and more rounds would be better. Did I misunderstand something?