Getting your password isn't as compromising as, say, getting a photo of you nude, in the security theatre-sense.

Think of the OPM hack[0] and the potential for a foreign entity to compromise someone (that they know has a security clearance) with blackmail. This has a much larger and potentially far longer ROI than a simple compromise of a password; which probably has to be changed every 'x' days, anyways.

You have to think of things like this in terms of long-term yield and not immediate results; unless we're talking crackers, then they're almost always after immediate results.

[0] - https://en.wikipedia.org/wiki/Office_of_Personnel_Management...