I can imagine a thought process along the lines of: "Most people don't use password managers, so it's asking for trouble to allow extremely long passwords. 32 s

I can imagine a thought process along the lines of: "Most people don't use password managers, so it's asking for trouble to allow extremely long passwords. 32 should be plenty, even for the security conscious minority."