The system is complicated and PM (which is run by volunteers) doesn't have the resources to simply change this aspect.

Unbelievable?

For comparison: My online banking is limited to a 5 letter login without special characters!

A friend and security expert explained to me that's because most banks are still running legacy systems on mainframes.

And I suppose they have more resources than us.