The why is people who don't actually understand security but once took a class that taught them about SQL injection and used that to parlay themselves into a role that weren't qualified for as a "security expert". That's the basic why.

Sorry, your password must not contain characters other than “a”. Also there is a 6 character limit.