apiUtils.sendApiError = function (res, errorNum, error) {
  return res.status(errorNum).json({ success: false, error })
}
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.