The only "nuance" here is that weak security is "probably fine" in many situations. It should still be acknowledged as weak security. Most houses don't have lo

The only "nuance" here is that weak security is "probably fine" in many situations. It should still be acknowledged as weak security. Most houses don't have locks appropriate for bank. Many people do get by with weak passwords in many situations. But acknowledging the weakness of this sort of security is still important because a given person has to consider the threat they face (activists who may face repressive state should what good and what bad security is still) and because new exploit method can appear.