I think part of the problem is that many sites do not support the use of non-alphanumeric characters in their passwords. That puts people into the habit of using just numbers and letters, so they don't have to deal with running into such restrictions in the first place.