Because it’s a minimum level of due care. Not meeting a minimum level is called negligence. I think most people would agree that in this day in age, leaving pa

Because it’s a minimum level of due care. Not meeting a minimum level is called negligence. I think most people would agree that in this day in age, leaving passwords in plain text is like not even making the effort. If you didn’t lock the doors on a bank, that would be the same thing - not making an effort, even though many criminals can pick a lock. So yes, the analogy holds up.