One of my kids was doing that with password123 etc. I have explained how you may not care that your gym account gets hacked, its the fact that they will try those credentials with your bank account, etc.