I guarantee to you it was an informed, calculated decision, not laziness or incompetence on anybody's part. I'm working for a Fortune 25 company, and one of th

I guarantee to you it was an informed, calculated decision, not laziness or incompetence on anybody's part. I'm working for a Fortune 25 company, and one of the main drivers behind our website redesign is that we're losing a significant amount of money providing assistance to people who aren't tech savvy. Making passwords case insensitive, preventing special characters, and other such things are mostly there to cut down on people accidentally creating a password they can't remember and then calling in to get a password reset. Those costs aren't trivial when you're serving tens of millions of people per month, a large percentage of whom are elderly and have trouble using computers at all. Additional layers of security can be added through more creative means and are typically more effective with people who don't use computers all day (two factor authentication by sending a verification code through text message when an unknown IP is used, etc.).