I'm not sure what you're talking about, you definitely seem to have misconceptions about passwords, their math and services like haveibeenpwned. You seem to li

I'm not sure what you're talking about, you definitely seem to have misconceptions about passwords, their math and services like haveibeenpwned. You seem to like simple passwords and think that people should use them so long as they're not leaked. Well no, simple passwords are never good; a probably very large number of the possible ones has already been the subject of some leak, and they're very risky in any case. Service providers (should) strive to give some protections even to users with bad passwords, but you sure can't rely on that.