True, but if the hashed password is compromised, the user‘s other accounts with the same password might remain safe. So it‘s not about protecting one single account but protecting the user.