I thought the point was to construct a password that's secure enough _and_ easy to remember for humans.

Adding random punctuation helps with the former, but might interfere with the latter. (In the extreme case, you just generate completely random strings character for character. That's the most secure, but the least memorable.)