It's not like bad guys don't already have wordlists, or that they are new in any way. Having good ones available, in the open, for everyone to use, provides a net benefit in the long run imo.

Year after year people still use the same passwords that were the most popular for the year before. I think we should make it as obvious as possible that it is worth your time to make secure passwords.

I think people know that they shouldn't use "password" as a password, but it just needs to be made very clear through safe means (such as publishing wordlists that don't have any associated user data) that it leaves you very vulnerable. Many people simply haven't stopped to wonder how secure their password is.

My goal with this project is to flip the status of the passwords on the list - and make them the LEAST likely to be used.

Also see: Security through Obscurity.

[0] Google's notorious Project Zero, for instance.

It's a fairly specific term so trotting it out for everything makes it pointless and obscures its actual meaning. Every time someone misunderstands something about information security (or someone thinks they do), someone else comes along and says 'Security through obscurity!' or 'Trusting trust!' or something about source code. It turns these things from terminology and concepts into magical-sounding incantations that really just mean 'I disagree/don't like this'.

This is analogous to the more familiar overuse of 'ad hominem' and 'straw man' and so on. It's not a good thing.