And this is kind of a variation on the point I made earlier, arguing fallacies isn't productive. With a little effort it's not hard to find an exception to any informal fallacy, it's kind of built into their nature.the problem with the appeal to authority is that it discounts expertise...
I have personal experience (non professional) that he dumb password restrictions at work make the passwords less safe. (people end up having to write down and hide passwords, and many of the people you see use the same hiding place on the desk)
My buddy who works in IT security (actually two) have very technical reasons why the password requirements at best are a minor inconvenience to modern hackers...and these dumb double auth things I hate even more are better.
if someone disagrees with me that the stupid password requirements work they throw "your personal experience isn't data" and "Your 'friend' in IT is an appeal to authority... so I can't use my own experience, and I can't quote someone that is an expert and at that point how can you say ANYTHING?