I think it makes them look bad that we HAVE TO GUESS, no assurance, no notice, nothin. For all we know a hacker's taken over and is actively stealing all the payment methods and we wouldn't know until its too late. (Although i doubt this to be the case, its still possible given we have no input)
if you need to change your password just click on "forgot your password" and enter the email. then it will send you an email with a link to change your pass