To your site, they probably don't. But they'll take the email and password and use it elsewhere. You'll have still exposed your customers.