I'm surprised that blank passwords were ever allowed since they are probably the worst security you can make,

Maybe in the future a more strict password security protocol should be established and enforced, forcing password changes every x days would be unduly burdensome but complexity requirements might be a good idea especially since as you mentioned the adminship and the community pool has enlarged greatly.