With all due respect but I don’t see a ground for this. Our migratepassword plugin has been around for over a decade and there haven’t been any security issues.
As long as you keep the migratepassword_allow_insecure_passwords setting disabled it will impose the same password security restrictions as Discourse core does.