They have nothing better to do than store a decade’s worth of password hashes so that every 90 days I have to come up with a completely new password that’s somehow magically different enough from every other password I’ve come up with in the past 10 years and is at least 10 characters from each of the 4 holy categories.