>humanly generated passwords tend to be predictable, repetitive and not very long.

Not necessarily. See https://xkcd.com/936/