While I agree with what you say, one could argue there is the additional element of protecting against user password reuse between sites. If the client-side ha

While I agree with what you say, one could argue there is the additional element of protecting against user password reuse between sites. If the client-side hash is strong enough it means that your plaintext password leak becoming a hashed password leaks at least protects the user from reuse on other sites.