I think point 3 is a good example of 'less is more' being applied in a wrong manner. Double email-address form fields are indeed silly, but passwords are invisible. The second field is there to catch typos (it is unlikely users make the same typo twice) and copy-paste mishaps.