Agreed. And even if you're only going to judge the strength, at least show what the user can continue to do or has already done to strengthen their password.