Why doesn't Citadel have the ability to enforce password strength?

Because your idea of a “strong” password is completely wrong.

Please refer to http://xkcd.com/936/ to understand why.