If the login credentials are used within 24 hours by the intended recipient to log in and then change the password then perhaps it doesn't matter if the message

If the login credentials are used within 24 hours by the intended recipient to log in and then change the password then perhaps it doesn't matter if the message is decrypted by an attacker six months later. So I can think of worse use cases.