Comment by glaucon

> I'm honestly seeing little value in asterisks

They're essential ! How else would we encourage the average user to use as short and and as simple a password as they can get away with ?