Let's keep it brewing for awhile and then gather all the ideas, analyse them and create a concrete and detailed plan: Improving NXT Security.
And make it easy

Nah... We will give each user a bucket of paint and ask them to bungee-jump over a huge canvas.
When they are lifted back to the platform, they take a snapshot of the resulting masterpiece and the program will try to read it as a QR-code.
It will be garbled, but that's Ok - here's your new passphrase.
You know, I actually love this plan.