I do not mean to single you out but this is a viewpoint that I have never really unsderstood. If you do not care about "my security" then why have a length requirement?
You don't want your product to be the one with hundreds of people having their accounts compromised. This warrants a bare minimum of password requirements.
Exactly. So you do care about the security of the users.
No, he cares about the reputation of his product being spoiled by the intellectually challenged.