The point is that "Password2016" will often score as "strong" (enough) while it really isn't.