The reason they are against Richard is simple: They are sympathetic. They know it is possible, one day, that they will screw up badly as well. When that day comes, they will want someone to pat them on the shoulder and say 'there there.' Not someone hitting them around the head with cold hard logic. Yes, in some way it is their fault! It is much easier to hack a password then it is to hack the encryption directly but even now, with today's technology, it would take decades to hack a good password unless of course: you mess up!
Now Richard:
As for hacking passwords, give me time and I could do it without too much problem. Do you know how many people out there can be 'dictionary hacked?' It is a sad thing but most people like passwords they can remember and will chose something relating to themselves in some way. You might be harder, you're in the know and will chose something which isn't so easily hacked, but most people are not willing to accept random character passwords for the simple fact they are not easily remembered.
That normally means a password consisting of one word, usually the first letter capitalised, followed by a number that usually is no more then 2 digits long. Takes a computer maybe a few minutes to break through one of those....
So it isn't always directly the users fault, they don't always give out the password to have it hacked. All it comes down to is basic human nature as most of us have had experience having to reset a password cause it has been forgotten, I face this too much, yet very few of us will have experience having our passwords guessed to begin with. We 'play the odds' that we will be more likely to forget a password then have it hacked, so chose something easier to remember though that is weaker security wise.
Personally, I rather understand how the hacking programs go about it and design a password that will confuse them to the point the have to go character by character to hack it. Then I know I will not have to worry for at least fifty years.
So simply put to people here: Put a capital letter in the MIDDLE of your password and have at least three numeral digits somewhere in there, start and end is just as good as in the middle for those numbers. The capital will break most 'dictionary hacks' right there and it isn't hard to remember what digit is capitalised. If the numbers are important to you, say the day you where born, then put a 1 at the end or enter the number twice, if there is room, to make it harder for them to just guess.
We are not saying you need random character generated passwords, but just use a little 'spice' to keep it from being so easily guessed by a computer just quoting the dictionary to your steam account.