You can teach a horse about water, you can't force the horse to drink that water. Some horses just die of dehydration.

Yes, weak passwords are bad. DO YOU HAVE ANY IDEA HOW MANY PASSWORDS THAT ARE PASSWORD I HAVE SEEN OVER THE PAST WEEK ALONE?

There was a thread on the WordPress forum that Mika answered (she didn't create it), the user mentioned they had WordPress 3.4.1 or around that. Not updated.

The reason your site will get hacked is due to a combination of the following:

1) Your username. I am sure Mika's usernames ALL OVER the internet is Ipstenu. Mine is miroslavglavic
2) Your password, people have easy passwords due to lazyness. PASSWORD is NOT a password, your birthdate (your mother's, father's, child's, spouse's) is not a password.
My father's security system pin was his birth year.

Funny thing is that when I call my phone provider, they ask me: my name, cell number, birthdate, home address (phone is registered at my home address). Those are easy to find.
3) Theme updates - I always say use a plugin instead of hard code it. We all know when you update, those custom codes will go bye bye
4) Plugins - I don't know why someone will use a plugin that hasn't been updated in a year. If plugin hasn't been updated in 6 months...think of getting another one to replace it. I wish plugin authors would tell people that they are giving up

5) Garbage - Turn on your user registration for a day (make sure they are only subscriberes) and I guarantee you will get 100 regs in that day.
Themes that you don't use. You don't need more than one theme.
Plugins you don't use. Sorry Hello Dolly. If you don't use extras. Get rid of them.

In one of the sites I help with, it is a online publication with 377 writers.

I have limit login plugin.
I am soon implementing StrongPassword33 system where the writers (377) have to

1) HaveUpperCaseanDLowERcASe33 passwords which includes numbers as well.
2) Their passwords must be changed every 6 months (exact time hasn't been approved yet).

No one element is the key to keep your site safe.