in this day in age, if you're dumb enough to use 123456 as a password you deserve to have your identity stolen.
I think most people have several passwords. For sites which I don't care if the password is stolen I use a common password like 123456. So it's not strange that they are ranked at the top.