[cincinnatus]

Blaming the victim. Yes of course, but no, not reasonable to expect users to be smart about passwords in general.

[shortstuffsushi]

I don't mean to exclusively blame the victim, but you can only go so far to protect a user if they won't protect themselves. I haven't read through the suggestions on the site, but it seems like this should be the primary -- as a user, you need to take care of your own safety and not rely on good development practices to protect you.

[sameerds]

You just blamed the victim. Again.