Reading between the lines this is a political move. Users hate IT security. IT security like all professions has become blame shifting not about security and m

Reading between the lines this is a political move. Users hate IT security. IT security like all professions has become blame shifting not about security and made the problem worse. Password complexity rules don't matter in practice. This keeps users the most happy and is close enough. OT:If you are a hacker and care about TLA, passphrases seem the best but you need more than 3 words and you need something random in the mix. This is if they have your encrypted hard disk for instance or wallet.