[jblox]

From what I can tell, most apps I use now at least enforce some kind of minimum password requirements e.g must be so many characters long, have special characters etc.

I guess the data used for this comes from security breaches, so maybe there's a bias in the data towards less secure apps that don't enforce strong passwords.