True, especially considering that a lot of accounts on Yahoo and AOL (basically part of Yahoo and does this same policy) are likely a decade or two old, so they

True, especially considering that a lot of accounts on Yahoo and AOL (basically part of Yahoo and does this same policy) are likely a decade or two old, so they may have passwords of like 6 characters and no 2FA, because that was super common back then.