this is a really smart idea - proactive account protection. it would be great if users had two factor auth on everywhere and different passwords for every site,

this is a really smart idea - proactive account protection. it would be great if users had two factor auth on everywhere and different passwords for every site, but that just isn't reality. as the amount of breaches of random sites has gone up over the years, and the exposure of poorly stored creds from those other sites too often exposes that one password they are using everywhere and requires locking out that account. doing this in an automated way is really smart to save the time of an engineer going and grabbing the pastebin and invalidating creds. well done.