The password strength script attempts to be accessible by using aria-live to announce when the password matches the site requirements.

https://github.com/joomla/joomla-cms/blob/4.0-dev/build/media_source/system/js/fields/passwordstrength.es6.js#L143

However the code is wrong. For aria-live to work the region must be on the page at the beginning and then updated with content by js. You cannot dynamically add the aria-live region.

This should be done similar to the message layout

Also in this case it should be assertive and not polite as we want it to be announced immediately that the password meets the site requirements.

You can easily test this with the builtin screen reader in OSX or Windows