My company also enforces some pretty strict rules; no repeating combinations, or things like “1234” or “abcd”. I suspect most people now have to write down their passwords, making it less safe.