I don't know anyone personally that are good at using passwords, myself included.

Often I get shocked to find highly tech savvy people taking crazy risks.

But even the most careful people I know occasionally reuses passwords or picks easy to guess ones out of convenience. Most of the time it is a calculated risk, but the problem is it is hard to tell when you accidentally create a chain of weaknesses that can be leveraged into something more substantial.