Because MetaMask allows simple passwords, you must self-regulate to ensure safety.
To ensure a baseline of security, MetaMask enforces the following requirements when you create or restore a wallet: metamask password requirements