And yes, I know this is basically the five password generator, I’m just describing it as I would write the validation logic, and wondering what (with that kind of specific, yet loose, logic) the security would look like compared to the hundreds of different complex rules everyone else uses...