Now it’s definitely going to contain those words, just not in the way you expected.

lol.

Yep. Password must contain certain characters? OK, but longer is better than complex. Password must not contain certain characters? Then you obviously don’t store it properly.