The weakest point in any security system is people. Whether it be weak passwords, no passwords at all, falling for social engineering attacks, etc., passwords are the first line of defense from people getting access to your account.