Every time I hear of something like this, I'm reminded of eBay basically forcing PayPal on both buyers and sellers, insisting they did it because it was oh so much safer than mailing a check or money order. Yeah right, greedy morons.
but they certainly won't want to be responsible for the trouble their users get into as a result of this fiasco, though.
They'll even tell you whether your password is considered "safe enough" to suit them. That's very rich, considering this breach happened at their end.