At what point do we call collecting large numbers of user credentials in a central place that can be accessed worldwide a bad idea? To me this is the problem P

At what point do we call collecting large numbers of user credentials in a central place that can be accessed worldwide a bad idea? To me this is the problem P2P should be solving, not Facebook, Google or Mozilla