Inasmuch as Heartbleed is forcing admins all over the internet to patch their servers, and inasmuch as it's considered wise to change one's passwords after said patching, I'm wondering if PM:
was ever vulnerable to the OpenSSL issue known as Heartbleed, and
The rest of the internet is affected, but not PM. If you use the same passwords across multiple sites, you have to worry about someone getting your password from site a and then using it on site b.
There is a good list of passwords you need to change at