But how many people have throwaway passwords on sites like these? It might not mean much to the tech-savvy community, but I'm sure a lot of people use the same password for a lot of services.

They might not be able to do much with your account on Last.fm, but they have your email, for which you may or may not use the same password.