Then you're effectively banning someone's existing account, which they could have been using for years at that point. There's a lot of potential content there. Not a great feeling for anyone.

Seems like the simplest solution is to have some basic password requirements.