This issue has been solved in MariaDB 10.3 packaging where package name of mariadb-plugin-cracklib-password is correct and breaks/replaces work as intended.
The packaging of mariadb-10.2 in Debian has a lot of errors and is about to be removed from the unstable repository, and will eventually be superseded by mariadb-10.3.
