paraphrased and accurate enough>

Before:
We were told the primary verification is based on password strength. If your password was not easily hackable, then you can use email verification and login to change your password.


Currently:
Today's offering verified the email and offered a chance to provide "more information."

1) Password strength check can be easily automated.
^^^
A key part of my initial main point


2) How are they currently checking password strength, with what was offered today?
(I don't recall entering a password today, please tell me if I'm wrong) ***


***EDIT: I admit being wrong on an important detail:
Here:
Why, are we still waiting for more verification after today's verification? that doesn't match what was supposed to happen.