[mfashby]

It varies, I guess. For a normal end-user account on a system where no interaction between users is possible, it pretty much just affects you.

For some kind of admin account with privileged access to other users' data, then it definitely affects others.

One might expect increasing mandatory security measures correlating with increased potential damage of a breach. Similar to safety measures on mass transit vs. personal vehicles.