Most people just don't care. People have a mindset that they have nothing to loose.
The same goes with privacy by the way.
But that schools don't force their students to create good strong passwords is terrible. Securing your data is exactly one of the lessons they should learn kids 😌

I think companies should force their users to create stong passwords and strongly advised to configure Multi Factor Authentication.
But unfortunately there is still a long way to go...

I'm having some troubles with "shou ga nai" on this topic as I'm active in the field of Information Security myself 😀