And this is why we as techies should push and push for all major web service providers to support some form of 2 factor authentication. A bad password + 2fa is still more secure than a secure password without 2fa.