> we just rolled our eyes and added the filter

I hope you also gave the user a stern warning about not revealing details of their password again!