This is pretty bad: an auto-generated password from Chrome in point 1 would not pass "simple" password rules from Mailchimp in point 4: so which is it, are the

This is pretty bad: an auto-generated password from Chrome in point 1 would not pass "simple" password rules from Mailchimp in point 4: so which is it, are the rules simple or not, and are the autogenerated passwords secure or not? Then there is also talk of avoiding passwords altogether with "any kind of 2-factor authentication", but what would be the first factor in any 2fa scheme if not a password? So, a bunch of incoherent, silly babble that can't agree on anything.