One time around ~2010 my uncle called me for tech support because his Yahoo account got hacked. He was absolutely flabbergasted that someone had gotten into his email. He asked me to take a look, so I asked for his username and password.
Guys. His password was four letters long. FOUR.
He had set it back when Yahoo allowed this and somehow never had to upgrade it. I have never seen anything like it. And he was irate when his new password had to be at least 8 characters 😂