Just a minor 'tweak' ...

Any password has content, be it blank or otherwise, and so has to be treated in the same way.
Therefore it would always be the case that one would have to enter the blank in the old password field and click before entering the new password and confirming it.