Password hygiene is essential; if the user does not do this, he does not understand the risks associated with it. Using the same password on multiple accounts is very risky, despite everything two-thirds users use the same password.

https://www.welivesecurity.com/2020/05/28/people-know-reusing-passwords-risky-most-do-it-anyway/