We should add [craft-enforcepassword](https://plugins.craftcms.com/enforce-password) by default including at least the default config.