64 people using '123456' out of over 10,000 people (who were caught in a phishing scam), doesn't mean that most people don't get password security.