I don't think the one-week timeframe that was announced on the mailing list is wise. I left a more detailed comment at T208246#4804686.
Topic on Talk:Wikimedia Security Team/Password strengthening 2019
Leaving a note so folks don't think we're ignoring Tgr. :) Replies have been made on that task.