This is a good point. In a certain sense, all your webmail accounts are already compromised. It's just a question of "by whom"

[edit: substitute 'cloud' for 'webmail' to get an idea of the full range]