Currently, tpm-reset code and oem-factory-reset code are not preventing users to provide a passphrase that is more of 32 chars.
oem-factory-reset code is defaulting to 12345678 and a single custom passphrase/PIN limits it to 25 chars because of HOTP/GPG Admin PIN size limitation, so that is probably why it was never reported before.
Currently, tpm-reset code and oem-factory-reset code are not preventing users to provide a passphrase that is more of 32 chars.
oem-factory-reset code is defaulting to 12345678 and a single custom passphrase/PIN limits it to 25 chars because of HOTP/GPG Admin PIN size limitation, so that is probably why it was never reported before.