That's the thing... It's easier for people to download an app than to keep up-to-date on security events and proactively update to higher entropy passwords.