If people use SQL backend for user authorization and allow SOGo Change password future SOGo will allow people to set any password user enter in SOGo even them obviously unsafe. With LDAP backend this can be handled by LDAP policy, but not with SQL one.
This was already mentioned in https://sogo.nu/bugs/view.php?id=1993 far ago, but maybe now this can be fixed via sogo.conf for sql backend or even for all backend with providing helper note about applied password policy on SOGo Preferences. | 
related to
child of
duplicate of
