I've seen many of users typing their birth year, their first name or just "123qwe" as their password. Way too many I'd ever expected. I really doubt they under

I've seen many of users typing their birth year, their first name or just "123qwe" as their password. Way too many I'd ever expected. I really doubt they understood the possible consequences. Restricting is inacceptable, but warning against using seemingly-insecure password should be perfectly fine.