Security is a shared responsibility; they have no control over you keeping your password secure. The older a password is the more likely is compromised, either on your end or on theirs.