Numerous is greatly overstated. 1) only matters if you're a very high value target who is being manually target. Doesn't apply to 99.999% of people, who only n

Numerous is greatly overstated. 1) only matters if you're a very high value target who is being manually target. Doesn't apply to 99.999% of people, who only need to worry about credential stuffing and brute force. 2) Similarly, it's not hard to come up with an algorithm that satisfies 99.9% of websites. 3) To a lot of people, managing a password manager sucks. I personally do use a password manager and automatically generated passwords, but also understand that for many people it's the better option.