Why should I trust haveibeenpwned either? I know the reputation of the owner of that site, but how is it really different? Is the resource publicly verifiable ? Its just implicit trust we have on the site. Away from HN echo chamber, a regular user can't differentiate various websites. Calling it stupid is a bit too much.