I don't know. I don't have statistics offhand. But yes, if people don't choose secure passwords.... Whenever someone resets a password it goes through the process for when they believe their account's been compromised, and we do advise them on all of the best security practices to make sure that doesn't happen again.
On December 6th, 2012. See this statement in context.