When you sign up for a new account anywhere shouldn’t they try your email & password at the most common sites & reject it if any match?