True or false? it's more important to understand risk and compromise than it is to use strong passwords.

The correct answer is false.
It is not more important to understand risks and compromise than it is to use strong passwords - both are equally important, and the latter might even be more important than the former. Understanding risks is important, however that is just an additional aspect of you protecting your data.