1. Most users use the same email/userid and same password across variety of sites. A compromise of your site should not automatically compromise all other sites.<p>2. Backups have tendency to leak more so than the server security itself.