“We decided to make the decision, like, you can no longer use a password we consider compromised on the site.”

Transcript evidence from Neil Matatall -- AppSec at Scale.