So regarding passwords for the casual as for the expert user once and for all the xkcd comics stripe on passwords: https://xkcd.com/936/
And when I use a passphrase that my password manager generated, the sign up form called it “weak”.
A much shorter password (about half as many characters) that is arguably weaker and has less entropy was considered “strong”. Just because it had punctuation.
I like to change the metaphor. We’re not visiting websites. We are inviting them into our homes.
But when we open the door, our friend brings a group of rowdy drunks with him, they’re rummaging through closets (privacy invasion), they drink the beer (draining batteries and using internet data volume) and maybe they damage things (malware) - so I have a bouncer. If you’re not invited, you’re not getting in.
As for creatives, I’ll happily tip them, i have no issues with sponsored content (as long as it is declared) - they probably get more from that then the ad-impressions.