I don't think VALIDATE_PASSWORD_STRENGTH function is particularly meaningful. The password either passes the policy or it doesn't. It cannot kinda sorta 73% pass the policy and 27% fail it. Any attempt to assign a non-boolean "weight" to it will necessarily be very arbitrarily.

For example, the attached PR assigns an equal weight of 1 to every plugin that the password passed and 0 to a plugin that it failed. And then normalizes the result. There is no logical reason why all plugins should be equally important. Nor a password that passed 2 out of 5 installed plugins is any "more acceptable" than a password that passed 4 out of 5. Both cannot be used, as they failed a required policy, set by the DBA.

In other words, MariaDB shouldn't have this function.