The thing is, for high profile targets like these, it's usually not a matter of if, it's a matter of when.
Don't rely on just a password to get you by. Make sure your accounts, especially very sensitive ones, have things like multifactor authentication.