You really need to re-think this attitude toward security.
It is absolutely your responsibility, as the developer of your application, to make security of user accounts an absolute priority.
It doesn't matter what the purpose of your website is - if you're having users create accounts, you need to secure them as best as you can. It's not ok for you to classify users who have poor password practice as "Bozos".
These are your users - your customers - the people who give your application a purpose. Treat them with respect, or let them find someone who will.
It is absolutely your responsibility, as the developer of your application, to make security of user accounts an absolute priority.
It doesn't matter what the purpose of your website is - if you're having users create accounts, you need to secure them as best as you can. It's not ok for you to classify users who have poor password practice as "Bozos".
These are your users - your customers - the people who give your application a purpose. Treat them with respect, or let them find someone who will.