Dans Data has a humorous and quite depressing summary of password security.

Link. The theft-limit must be the supply of capable criminals. Otherwise 99% of Americans would be penniless.