[DustyPorViva]

There was NEVER an option to choose their own passwords, as far as I remember. I remember this because back in the day I was quite baffled at the concept of auto-generated passwords since Graal was the first I ever seen do it... and still is the only one. It could have happened while I was gone from Graal though.
I mean if brute-force is what gets all these custom passwords stolen(assuming they're just too simple), simply disallow repeated failed attempts. Otherwise it's either a really simple password that someone just happened to guess, or it's another hacking method that would still happen even to an auto-generated password.