Which is not really a great assumption to make - people have been using weak passwords for decades against advice to the contrary, it's likely that isn't going to change in the short term.