This is topical because I just got one of these emails. Nobody is going to bother guessing that I would be stupid enough to use a four character password. It’s good enough for my bank and my phone, so it’s good enough for my computer. (/s) At least now they recommend pass phrases instead of words, but the examples were contradictory and they wrote all the words in 13375p34k