I just bought a new Roku. The MAX app won’t let me sign in without a 10 character password. My account is old enough to be before this was a requirement. I can sign into their website with my 8 character password just fine.

Save the security lectures. It is a random password only used there. The chance of it being in a world list or brute forced are practically 0.