Your Security Score needs to be recalculated if you employ two-factor authentication against a Web Site   Not changing a password is mitigated and risk reduced if you employ 2-factor Authentication and if this a soft token using OTP like google authenticator and your score further improved if you use a hard Token such as yubikey.   This would help promote people into using 2FA and nudge them in the right direction buy improving there score      ... View more