Considering this is actually a passport validation check perhaps ensure it's at least a certain amount of characters too? Because `a` would still validate with `+` operator but probably shouldn't.