This dynamic can have severe consequences. Consider for example password requirements. People write "password" as their password. A hacker guesses it. IT says, passwords must contain a number. People write "password1."
As IT requirements become more onerous, people use 1 password for everything.
