Years ago people used very simple passwords, usually kids names with birth year or something stupid like that or password123.
As the years went on and the Hackers kept stealing people started making more complex passwords with special characters.
So wallets created in 2013 that have not been touched most likely have more general passwords like in the Rockyou list.
So it's not in a technical level.
But some people are still using those weak passwords, I'm sorry but I feel like that answer is forced

@
OP / Others, for reference, he's not the "
Dave" from walletrecoveryservices.com BTW.