Most places force you to put a number and a special character in there now, the number of places you can get away with just a word for a password is dwindling
No I don't think there really were many so your point is valid
But the law works like that, things are in a grey area or in limbo until they are defined into law.
That means the new law can be written to either protect consumer privacy, or make it legal to the letter to rape consumer privacy like this bill, or some weird inbetween where some shady stuff is still explicitly allowed but in general consumers are protected in specific ways from specific privacy abuses
This bill being the second option is bad because typically when laws are written it then takes a loooong time to reverse them
Is that Eric Murphy?? Murphy Group!