Use unique, randomly generated passwords for each online service and encrypt these passwords locally with a passphrase you won't forget. Then there oughtn't be any surprise nor disappointment when the online service is inevitably compromised. Don't forget to enable multi-factor authentication.
Makes a mockery of their famously difficult technical hiring process.
Well, if they gave a double ROT-13 quiz then it'd be a great answer.
It makes me happy to see companies getting grief for this. It absolutely blows my mind every time I see this in large production systems such as banks and hosting companies.