The 2nd quote does.
They are investigating, and don’t want to list anything because it’s all up in the air.
If they listed alternatives, the discussion would be based about them, the pros/cons etc. They also explicitly state they don’t want suggestions.
This seems like a formalised information post about previous discussions, rather than anything concrete.

Whatever backend/service they use will also dictate the app used to access it.
For example, if it’s a forum based software then jerboa isn’t going to be able to interact with it at all (as jerboa is specifically for lemmy).

For passwords in software chains, I always think of them as API keys. So, making them 32 or 64 character random strings doesn’t seem ridiculous.

Fucking hell, that’s horrendous