Password rules as implemented generally are not sufficient to avoid good dictionary attacks, but having long, random passwords as provided by password managers absolutely does reduce risk. Forcing humans to come up with passwords on their own with no system encourages 2 things:
1) short, native...