How to be blocked from updating your password

I was able to get blocked with my current password "quality".

It was not possible to get around the validation in the GUI, so I had to update it through their XHR service

curl to update password

How would normal user get around this?

Other dangerous password compliance policies applied out there:

8 to 11 characters