Sites don't get hacked because it's easier to social engineer a persons password.