Fly.io password requirements or SSO?

We’re prepping for SOC 2 & noticed Fly.io has no password requirements. For example, I was able to change my password to “bob”.

Does anyone know if the business accounts, etc are able to require a higher standard? Or maybe SSO instead?