Worst passwords list is out, but this time we’re not scolding users