I won't discourage you from building it, but people have a default password that passes this validation that they reuse on every site, and so if one site leaks it then their nsec is cooked