Does not prevent weak password via reset

[antipole2]

Like this very simple plugin. It works fine when setting the password in the backend.
But by following a reset password link to the reset page, you can still set a weak password.
What is needed to cover that case?