Several people have said they don't need a good password or strong security because they don't have anything worth stealing in their account. I understand this thinking, but it is wrong. The problem is that evil people don't know you don't have anything worth stealing, they will compromise your account if it is easy and then see if you have something valuable.
Your next thought might be that breaking into your account doesn't break anything you have to pay to fix, unlike someone smashing your car window to see if you have something worth stealing. I also understand this thinking, but it is also wrong for multiple reasons…
Your real, live, "organically grown" account itself has a lot of value. Email and social media posts from a person's account will always be more valuable than posts from an artificial bot account. Your account has connections, email addresses, Facebook friends, followers, etc. That's a ready made list of people that can be more easily exploited using your account.
Any compromised account can lead them to your email address or phone number. Maybe they can compromise one of those or maybe they can find other accounts you have and compromise them. Your imagination may be filled with movie characters working hard to crack someone's online system, but in reality there are tools that let evil people use to work more wholesale than retail, more assembly line than craftsmanship.
Your account probably controls more valuable things than you realize. Even if it's not your main email address, does it control your phone or your laptop?
In the long run, you need to secure everything you have to the best of your ability.