What's the reason for the "Change at-risk password" warning?

@SubnetMask Before you drop a bug report on GitHub: make sure you’re on the latest BW versions (browser extension, desktop app…) – and I would also check the other two reports for “weak” and reused passwords, just in case.