Even with length of 10+, I still think there is value in blocking a) 100k most common PWs and b) "aaaaaaaaaaaaa" and similar