It's easy to get friends this way with irc and the internet you know. Besides, even if they are only spread around the country or a couple of countries it already makes things way harder. Regardless, passwords, even regular banking passwords are not meant to protect you against people that are willing to abduct you and torture you so I've always found this xkcd kind of unfair. Most passwords are meant to protect you from regular hacking attacks or internet thieves, not your local crazy mafia gang.