"When the DB with clear text passwords is stolen from our server, because we haven't installed updates in three years, at least your other logins won't be affec

"When the DB with clear text passwords is stolen from our server, because we haven't installed updates in three years, at least your other logins won't be affected." There's no better way to communicate this to your customers than complex password requirements.