Yours does not include an English dictionary word or name though (unless sh counts, but that's shorter and less common than 'max'), but yeah 5-char words being available, I'm also not too surprised by.
What I've done on reddit for throwaways is use 123123 as password so they can be reused. Not a one has gotten 'hacked' yet over months of use, I'm quite surprised tbh. Maybe I should publish the password on the relevant accounts once I decide to stop using them. Ideally there'd be a time factor before it changes hands to avoid confusion and editing old posts, but I would probably forget (hence the dummy password strategy).
