ie if you have a really long password with very high entropy would pass regardless of all the other checks