Facebook does - we have a blacklist of common passwords, and you cannot register an account with them or change your password to them. That being said, I think

Facebook does - we have a blacklist of common passwords, and you cannot register an account with them or change your password to them. That being said, I think with sufficient protections against brute forcing, password complexity requirements are largely a waste of time. The percent of users' accounts you can get into with the number of attempts allowed before locking you out is so small that it's not cost-effective, and the majority of people trying to break into accounts are doing so at scale for financial gain.