They have so many accounts broken daily? Then credential stuffing attacks are not prevented.