You've kind of answered your own question there - if they're able to log into other sites without using some kind of OAuth-type mechanism that doesn't require t

You've kind of answered your own question there - if they're able to log into other sites without using some kind of OAuth-type mechanism that doesn't require them to store your password, then a hack will compromise those passwords.