I think we're all well aware that typical users tend toward overly simple password choices. That's why helpful measures such as password strength gauges and password content requirements have become so commonplace. This is nothing new.