> Perhaps the companies involved have been told by their lawyers that choosing a password is a legal action, like an electronic signature

That might be plausible if anyone actually thought that.

E-contracts require typing out a signature, not a random phrase.