not forced to change password

I installed the plugin and after the first login, I was invited to enter a new password. As a test, I entered a very weak password, and indeed I got the message that it was too weak and would not be accepted.
However, without entering a stronger password, I was still able to navigate away from the page and create and publish new content.