"users should be able to use the same password on multiple accounts. you security people make things too difficult just being reactive. you should be spending your time focusing on not letting bad people do bad things... im going to do whats easy and thats using the same password on all my accounts ."- basically the gist of a convo i just had with someone who has worked in IT for over 30 years

Bad people shouldn't be doing bad things folks