How often are you running into length-limited password fields these days? I usually take it an organization is not attentive to or is outright uninterested in security, and either I shouldn't use their service (if it's optional), or I should publicly shame them.