This isn't a password complexity test, its a "don't put unexpected data into strongops" test: I've no idea what a zero length string will do to any of the intervening code, and I'm sure that it has never been tested.

I'm also pretty sure that when someone reports their zero-length wordpress password doesn't work, that slc strongops isn't the code we are going to be debugging.