Honestly, so what? Most websites aren't that important, so this "impressively large" study is mostly useless stats. I use the same weak password / spam email address for any website that idgaf about. Is that a problem? Oh no my reddit account is compromised what ever will I do??