Well, the first 3 are ok other than increasing the password length.

Next, they really should be using ed25519 keys if possible. Better, faster and all that good stuff.