The site has a section that explains the criteria including that Mozilla didn't decide on them alone but with other non-profits. Regarding passwords: "If the p

The site has a section that explains the criteria including that Mozilla didn't decide on them alone but with other non-profits. Regarding passwords: "If the product uses passwords for remote authentication, it must require that strong passwords are used, including having password strength requirements. Any non-unique default passwords must also be reset as part of the device’s initial setup. This helps protect the device from vulnerability to guessable password attacks, which could result in a compromised device." https://foundation.mozilla.org/en/privacynotincluded/about/meets-minimum-security-standards/ https://foundation.mozilla.org/en/privacynotincluded/about/m...