I understand the rationale. This would upgrade the level of a security of any given website.

I wonder... Can a third party launch a script testing my passwords without prior explicit authorisation? Could this trigger lawsuits/legal actions?