What on last.fm ever needs a secure password though? Maybe someone can listen to my premium radio if I paid for it, or scrobble as me, but I really don't care about either of those. As a user, a less secure password for sites that need less security just makes sense.