While I think passwords are one of the biggest points of failure of modern security, seems like this would alleviate authentication policy fatigue.
We have lists of known passwords. Virtually anything up to 8 characters. Many things above that.
There are lists of millions of real-life passwords dumped from services. All of those should be used to screen passwords on entry (directly or by hash) and force a password update on match. It's reached the point that this should be mandated by law.
I know far too many nontechnical people still using utterly broken passwords (and who've had multiple accounts hacked, and insist that they're doing nothing wrong....)