the problem is not coming up with hard passwords. the problem is trying to remember all of them across the litany of places that require them (many with varying policies for creating "safe" passwords). if we can solve the "remembering" part, users wouldn't even need to be asked to create a pw (it would simply be assigned)