Obviously random is better, but uniqueness of passwords is IMO even more important. They are effectively spreading around their master password