True dat !
Also password strengths are not about being able to hack or brute-force them (setting up a hacking program in a pre-OS login GUI or an encrypted hardisk is not possible).

Having special/mixed characters is also about preventing non-authorized access by people who can easily guess and login into systems or your social networking sites like in this example.