Yeah I think it is safe to say in America our cybersecurity is trash with passwords. I forgot where I was reading it and it might have been from NIST itself the percentage of passwords that people were using that were just password or 123456 it was crazy like 40%.
The Congressional requirements are freakin wild and we have to change them yearly.