What's to stop whoever leaks the passwords from just being semi active here and then leaking it somewhere else?