I think you also missed their homepage and useraccounts, which continues to get a huge amount of traffic. Granted, people who use Yahoo´s homepage/homepage pro

I think you also missed their homepage and useraccounts, which continues to get a huge amount of traffic. Granted, people who use Yahoo´s homepage/homepage probably aren´t the most sophisticated users, but the sheer number of eyeballs probably counts for something. So you have the brand/homepage, which is tarnished by their leak and subsequent refusal to reset passwords (anecdotally, even my mom asked me how to reset her password) and their email is tarnished (although I don't know how much their userbase cares about privacy) by their scanning of emails for the NSA.