Either it’s a bug or you’re using same password on/for multiple services. It’ll count each as insecure because if one gets hacked, all accounts using same password could potentially be exploited.