Statistical note: even if everyone in the world except a thousand or so people start using good long multi-word mixed-character-type passwords, those thousand using dumb passwords will rise to the top of such a list.