Yes, because someone is going to go through that trouble to get to a CoH account. And then after they got it .... what would they do with it? If you have a personal enemy willing to go to such lengths to get at a gae you enjoy, you have a far more serious problem then whatever they could do to your characters.
It's not about the CoX account, it's about the password itself. A lot of people, especially people old enough to have enjoyed CoX when it was NCSoft's/Cryptic's baby (even before Cryptic broke off and NCNorCal which later became Paragon Studios took over) or older, aren't savvy enough to use separate passwords for everything, especially if they were adults already back then. People like that, that CoX password could also be their Gmail password, their Paypal password, their Patreon password if they're a content creator, their YouTube/Twitch password also if they're a content creator, etc.
This so very much. I work at a software company and just this week a client told me they planned to store their customer's CC numbers in a particular field that was plain text, no hashing, tokens, encryption of any kind. Another client tried to give me a log in to their company's Quickbooks(this is not something I would ever need for my job, ever), and another straight up gave me his password via email and it's a password he uses for everything. People are really, really bad with security.