The standard password dialog certainly needs to be tested with repeated password entry as it will display the account password 'hint' at (I think) the 3rd unsuccessful try.

There is /no excuse/ for this unbelievable security hole. Total fail on Apple's part.