“The hilarious part for this website is that the embedded strength checker properly recognizes a good password; but then an additional policy is bolted on, just in case users were too happy.”
No spaces, no hyphens, must have a symbol, but not that symbol. Most of these rules trace back to nothing. A long plain password beats a short weird one. Password policies are where security theater and incompetence meet.