Im not sure if im a good or bad person by allowing my users to set a weak password.

They get to use almost whatever they want, but it may be bruteforced easily.
I let users decide their own security on that point.

I don't like password restrictions

I do believe that if everyone put some effort, it's possible to find a compromise.

But anyway, as long as everything has been written down to avoid any liability, it should be fine.

Edit: @j4cobgarby then you'll end up with "0000" and other "password".

I quite like the idea of "advice". So, when I used a password of "pw" on an Ubuntu install last week it told me it was poor, but let me use it.

Basically educate people without coercing them. "Hey. You're over 18. If you want to be an idiot, go right ahead..."

So, I did.

@platypus i like the idea of advice as well

@Jilano so? That doesn't compromise any password other than the person who chose it, it's their fault