Reply to post: The obvious

The obvious

The server software may be secure, but if users choose piss-poor passwords then that means nothing.

(as far as account access goes; privilege escalation is a different kettle of fish)