There are other ways accounts get hacked, there are some fake projects online that would request for logins just to get intouch with how someone's password look like, hackers tried this passwords on other accounts of the victims like their gmail  and blockchain accounts.  This point also makes account vulnerable to attacks.