Should You Block Compromised Passwords?
Blocking pwned passwords @haveibeenpwned is great, but you can't simply drop in `->uncompromised()` and call it a day when you have non-technical users.
https://securinglaravel.com/p/security-tip-should-you-block-compromised#Laravel#PHP