It's not really about keeping people from breaking into your site, but rather keeping them from using the data they get from your site to break into other sites.

Basically, a lot of people will use the same credentials on both (for example) Ashley Madison and their bank. If AM does a bad job storing their passwords, then an SQL injection there can be used to reconstruct the users' passwords and then log into many of their banks.