The problem is that sites can truncated your password without telling you. Hard to make the call not to use a site if you don't know it is doing that.