I don't care if someone sells my data, I care if some company gets compromised and doesn't tell me. And it makes it harder for bots to crack the same account at multiple places.