Not OP, but from what I’ve read, overall length is more important than complexity (special characters and stuff) when it comes to someone trying to crack it. So this one isn’t too bad in that regard. But being able to remember a password is also important unless you’re always going to be able to use a password manager to enter it for you. So in that respect it’s not great.
I personally really enjoy how David and the skeletons either can’t out won’t elaborate on the parts of their whole thing that the people are confused about. There’s just something funny to me about how it doesn’t seem like they’re intentionally being obtuse. They’ll gladly answer the vague question of “and the skeletons are…?” with the equally vague “part of it!” with a big smile, as though it was a perfectly fine and helpful answer.