I have seen production databases reachable from the internet with 8 character password and plenty others.
But my particular point is only about the readability of code from others.