Seriously. Bigger problem is password reuse. If someone gets access to a user's password they then most likely have access to their email account, etc.