I don't believe someone who only has a few logins is really the target here. Someone with only a handful of logins can easily remember separately complex passwo

I don't believe someone who only has a few logins is really the target here. Someone with only a handful of logins can easily remember separately complex passwords for them. For most others, they are using a variety of services and are reusing their simple passwords which put them at greater risk.