> A password in a leak isn’t evidence of anything.

It’s evidence that your password leaked. What are you on about? You think they just randomly guessed his password?