I don't really see the issue. It's not like some sort of deadly sin. If the users re-use passwords then that's on them.