Best practice in 2023 is a simple, sufficiently long but memorable passphrase. Excessive requirements mean users just create weak passwords with patterns.
[Capital letter]basic word(number){special character}
Enforcing password changes doesnt help either. It just creates further patterns. The vast majority of compromised credentials are used immediately or within a short time frame anyway. Changing the password 2 months later isnt going to help and passwords like July2023!, which are common, are weak to begin with.
A non expiring, long, easily remembered passphase like
forgetting-spaghetti-toad-box
Is much more secure than a short password with enforced complexity requirements.
I personally dont understand why mass adoption is a goal.
The "challenge" to bring users to Linux is simply making them want to use Linux. There are enough flavours and guides ranging from plug and play that anyone can use to build your own kernel and distro from scratch that anyone can find what they want in Linux... if they want it.
The truth is that for a not insignificant portion of computer users, the OS is a means to an end not a feature. Its "the computer". A laptop that comes with windows 11 is a windows 11 machine.
If you want the average user to move to Linux, create an desktop environment with the option to look and behave like either windows or Mac, have a software compatibility layer for both that can run at the same time, buy a hardware company and include the distro as default and sell it to the masses at a loss to undercut all other options. Flood all consumer electronics stores with them.
Outside that, its not going to happen and I dont know why people want to make a competition out of it. Linux doesnt suit everyone and it doesnt have to. We see less GUIs as a good thing, id rather dev time from the solo/small dev teams go towards the functionality not making it look pretty. The majority of computer users dont agree with that though, and thats fine. I like being able to add/remove from my OS, most don't and thats fine too. I like rolling updates, the uproar around windows updates with thousands of youtube videos dedicated to people stopping them indefinitely indicates many others dont. Our semi annual O365 update is currently rolling out at work, and people are freaking out that one of their outlook toolbars moved. Never mind its a 4 second fix to move it back, but can you imagine these people seeking out/installing/configuring/using a new desktop environment?
Its not an elitist thing. Id love more of my friends to use linux, but I cant make them want to use something. It either appeals to them or it doesnt. For most the appeal of a computer is the software it runs, and the OS is just a means for that.