I disagree >> someone who obtains your password will use it immediately, not sit on it for weeks until you have a chance to change it True, but I've personall

I disagree >> someone who obtains your password will use it immediately, not sit on it for weeks until you have a chance to change it True, but I've personally seen several cases where someone's email or facebook account was being used for unsolicited advertising and pornography, and they didn't even know it. They may use your password immediately, but they may also use it for a long time before the average person realizes it. Furthermore, their conclusion was justified purely by economic motives - about how much financial damage is done by cyberattacks, versus time spent changing passwords. There's no mention of the obvious privacy concern when a spammer has your password - regardless of the financial damage they may or may not do.