The biggest problem with all this is that Google, Facebook, banks and other similar sites all have the ability to recover or reset passwords. Might be a little bit of a pain to do but with a small amount of effort you can get back into an account when you forget your password. So the masses have been trained that password losses are recoverable. Only in the crypto world are people on their own safe guarding their wallets.
But more and more people coming to Steemit have little or no previous experience with crypto. So they don't understand that there is no help desk to call when they forget their password. That's the biggest problem, this is uncharted territory for them. They don't realize until it's too late that there is no fallback plan if they haven't made one themselves.
I concur. Since the steemit community is inviting the masses here, they must make the danger of losing your password explicit, bold, and crystal clear to the user at every step.