Again: that is not always the most sensitive things users have. I give my credit card to random people who work at gas stations. I do not give them passwords.