What I don't understand is: People use 1Password etc to generate arbitrarily secure passwords for Facebook but agree on sending their DNA password (even though its 1B chars) on a postcard to a company (with unknown security credentials and intentions) just to know that they are 29% east-european and probably sleep better at night. Sigh...