Unless any of the services you sign up for decide to log passwords like Facebook did, or store password hashes insecurely and get their database dumped online.

Unless any of the services you sign up for decide to log passwords like Facebook did, or store password hashes insecurely and get their database dumped online. I think it's pretty unsafe to assume that none of the passwords in your vault will leak from the service side, you just have to rely on the important services not screwing it up.