100% this.

So many places do these things wrong and just make wild assumptions based on their limited PoV.

I just spent a month adding international phone, name, and postal code support to a legacy app at my job.

They weren’t even consistent with their enforcement inside of the app.

Don’t add validation for anything unless you understand 100% of the cases. You should use premade libraries or tools in most cases because you will do it incorrectly.

The rules around passwords are equally as dumb