That actually sounds like it might be a business model (at least in places where the proletariat don't get too uppity). You run a password manager service and calculate data on people's password strengths and the number of duplicated password they use, and then feed this data to some sort of credit check system.