And these banned words somehow do not stop registration immediately? And these VERY secure identity providers then later show the admin what password was attemp

And these banned words somehow do not stop registration immediately? And these VERY secure identity providers then later show the admin what password was attempted? I would say that's extremely insecure if not a huge privacy violation for something to be considered "very secure", and would definitely not have any form of sign-off from anyone that keeps up to date with OWASP security practices.