As has already been said, it's not like they have a spreadsheet of each users passwords. Someone with more of a security background could explain better, but ev

As has already been said, it's not like they have a spreadsheet of each users passwords. Someone with more of a security background could explain better, but even if they were "breached", the attackers would still need each individuals password at minimum, possible still their "recovery kit" which for everyone is high entropy enough that it is not guessable with the amount of energy in the universe. (I have all my passwords in 1password, but if there is s legit weakness I'd definitely like to know it)