So what is your point then? No matter what you do – whether you verify password yourself or externally – the state of the art constantly changes and you have to update your code <i>either way</i>. There&#x27;s no escape from that. The reasons change, but not the code churn.