Look, it's easy to muddy the waters here by talking about mechanized attacks by bot herders and the like, but when you're talking about people that care about passwords at all, yes, really: they're valuable and people hold on to them.