A bank did something similar in this country some years ago. A customer changed his password to something along the lines of 'Barclays sucks'. Then a bank employee, without his knowledge, changed it to something more complementary to the bank.
A comedian, Lucy Porter, used to do a brilliant routine about phone banking security questions. She proposed that the question they have to ask her should be 'where do you think you're going dressed like that?'.
And her password in response 'you can't tell me what to do, you're not my real father'.