Should you block compromised passwords in your apps?
Yes, but... you also need to consider your users, and how technical they are. There is no point blocking pwned password with a cryptic message if your users won't understand what it means!
https://securinglaravel.com/security-tip-should-you-block-compromised/