Or they could be really decent like other services I've used who have run a comparison of their hashed passwords table against data dumps and disabled any account matches.
Or they could be really decent like other services I've used who have run a comparison of their hashed passwords table against data dumps and disabled any account matches.