4 ms·

Indeed. If your systems don't prevent users from setting "12345" as their password you deserve all the blame imo.