But then he, knowing the all-complex-password he's forced to create, can also make those others miserable too. Just because he is known doesn't mean he can't br

But then he, knowing the all-complex-password he's forced to create, can also make those others miserable too. Just because he is known doesn't mean he can't broke everything. So, the problem is with the service, not with his weak password. It's just a matter if someone will be easily / hardly / not at all blamed.