

Oh wow, things really have gotten bad over there. For me personally, the much greater risk is that I forget my phone somewhere or someone steals it and in that scenario a weak password is the larger issue.
It seems there isn’t a single correct answer here. The threat model is different for everyone.
























Haha, reading some of the responses in this thread actually reminded me of that xkcd but I couldn’t immediately find it. Thanks!