It would also be great to suggest this on sign-up forms when creating a new password, as Safari does:
For me to switch my wife over to using Orion as her daily driver, this would be pretty much required. I'm ok with openssl rand -base64 16 | tr -d '\n' | pbcopy
, but her not so much.