That sounds good until you remember the Bayesian Base Rate Fallacy: there are very few terrorists (the base rate of terrorism is very low), so filtering on &quot;people with strong passphrases&quot; is going to produce an overwhelming feed of false positives.