Password requirements don't really protect the business, they protect the user, and if the user isn't interested in protecting their data, why should the company force them to care?
Yeah, I just don't see the risk here. I don't keep my old magazines in a safe. They go under the coffee table, and then they go outside to the recycling bin.