There's a ton of websites devoted to password stealing. And they get passes not because users have weak passwords which Fileserve is pointing out. Most of the time they get their way through other means, its not 100% users fault.