I think his point still stands. You entrust your passwords to third parties. They don't always handle it correctly.