Problem is that often project owners will not know/care about joining such services. Unlike the passwords, project's security is a matter of interest for a much

Problem is that often project owners will not know/care about joining such services. Unlike the passwords, project's security is a matter of interest for a much wider public (all current and the potential future users), but if you let anyone subscribe to any leak than you are back at square one, cause bad guys can do it too.