As long as you don't use the same password for C-Brats as you do for other web sites (and in particular other sites with financial connections), you should be OK. For sites like the C-Brats, I use "throw away" passwords and don't care if the passwords are compromised. For all financial sites, medical records etc., I use a unique and strong password for each site. That's std., good internet practice.