Except they specifically list anti-phishing as one of the use-cases: "if you reuse the same password on multiple sites and one of those sites gets hacked, or y

Except they specifically list anti-phishing as one of the use-cases: "if you reuse the same password on multiple sites and one of those sites gets hacked, or your password is conned out of you directly through a phishing scam, it can be used to access some of your most closely-held information." You're right that it helps in cases where all the attacker has is your username and password. However, the blog post overstates the merits of this feature a little bit. ;)