That's sound advice, but most of the other people on the Internet (and most of the people in the leak) don't consider entropy when authenticating with their ban

That's sound advice, but most of the other people on the Internet (and most of the people in the leak) don't consider entropy when authenticating with their bank/Facebook/gmail etc. Creating your own passwords and typing or copy/pasting them in is a broken authentication experience.