The recent hacking of BMP shows the risk this creates (poorly paid employee with debts sold his password to hackers).