That was his point. Web services incorrectly classifying the strength of user supplied passwords.

The labels ("strong", "weak") are ironic.