And having those passwords leaked is probably only another 1-2 prompts away