Another one is password restrictions: if I want to use a one-character password, that's my business. If I want to use my birthday as password, that's my business.
If the app developer is concerned about security in case an attacker gets hold of the raw database, there are better tools for that (i.e. proper salting and hashing)
If the app developer is concerned about security in case an attacker gets hold of the raw database, there are better tools for that (i.e. proper salting and hashing)