True, but if someone is really motivated to undermine their own security, I don't think there's anything you can do to stop them.

I think the idea is that most users will just choose another password if you tell them the one they entered is too similar to their previous password.