Yeah, like you said, probably a bad idea. I have something that I deeply believe in about current world events that seems completely obvious to me and yet I usually never say online because of people’s unhinged reactions. I’m not sure that there is anything to be gained by discussing it because people tend to immediately froth at the mouth about the topic.
It’s crazy that they didn’t include all the “should” items in that list. If you read the entire section, there’s a critical element that’s missing in the list, which is that new passwords should be checked against blocklists. Otherwise, if you combine 1, 5, and 6, you end up with people using “password” as their password, and keeping that forever. Really, really poor organization on their part. I’m already fighting this at work.