You're not kidding. My bank doesn't even require anything near that secure. And there are plenty of decent 8 character passwords. You just don't allow the common ones like 12345678 and baseball.
...