You're assuming that the web sites use bcrypt. From the perspective of a web user, public/private keys allow me to not trust the web sites.