Hi Paul!
Good questions! We are currently reviewing the requirements and security of Standard ID. Below answers to your questions:
1. Only password restriction for Standard ID is 8 characters.
2. Not at the moment
3. MFA is not currently possible in SERP. This is one of the features that is in the design stage. In mystandard you can setup two factor password reset option for resetting Standard ID password.
Best Regards,
Rasmus