In addition to the other points, "regular users" unfortunately still quite often use only a few passwords, shared between all their services. So only 3-4 passwords (and variations) to remember!