Same mail at a shady provider
The only good passwords are those you don’t know yourself because they are randomly generated and all stored in your password manager of choice.
Then you look up the random string of 36 characters once, think “why did I make this one 36 characters” as you painstakingly type it in with a TV remote, then immediately forget it as soon as you’re logged in.
Then repeat this process every few months the device decides it needs to ask the password of you again. Not playing this game
Not really though. Once the password has been leaked, it needs to be cracked. And that usually doesn’t happen when the password is strong enough.
Except the password wasn’t hashed but then the company belongs to get sued to bankruptcy
That’s also assuming they used proper salts and a strong hashing algorithm.
Also MITM and or phishing attacks are not super common but can also depreciate your common password very quickly.
Always layered defense. If it’s not 1 thing, it could be another.
Unique passwords are just one facet on a multi-layered security defense.