[edanm]

This is based on research that happened at our company (Irregular), and I think it's very relevant to know about and to get the word out about this security issue.

Especially given the pervasive use of coding agents, who may without you knowing about it decide to generate a password for you, and it might seem secure but really not be.