Sure, and users are annoyed they don't get to use their go-to "letmein" password as well. But this is worth it for certain platforms, especially where your use

Sure, and users are annoyed they don't get to use their go-to "letmein" password as well. But this is worth it for certain platforms, especially where your users have something real to lose when they get pwned by cred stuffing (e.g. bitcoin casino). Personally, I'd go a step further and say it's also worth it anywhere an account takeover can impact other people like Reddit and Twitter where cred stuffing lets you take over high profile accounts and then post a crypto scam or something more targeted, for example. Mild inconvenience on a /register form doesn't sound like a serious counterbalance to the large cost of trivial account takeovers.