Seems like an opportunity for a “Generate passphrase” button via plug in if that’s technically feasible…
Would exclude anything on the pwned list and the user can elect to make their own which has the “basic” 1m exclusion list built in already. The button method means you can skip having to educate the user about pwned lists and entropy which generally they’re not going to have time for.
Discourse does a good enough job already though imo.