16 billion passwords are now out in the world, leaked for all to say... but is this as bad as it sounds?