"Thus far, site admins have been vilified for notifying all users, not notifying any users, notifying only FaceBook users, notifying only users whose e-mails and passwords had been leaked, and on and on."
You are right -- they should instead be vilified for sweeping this problem under the rug.
Comment on Re^4: Status of Recent User Information Leak