What's surprising is that Google threw me out of an account and told me to change a password this morning because "someone knows your password." haveibeenpwned shows no pwnage, tho, so I'm wondering what Google knows that I don't.