Well, my recommendation to people to change all their passwords is mostly based on the assumption that many people reuse passwords (or use passwords based on an easily-guessable site-specific variation). Also the fact that most people don't change their passwords as often as they should and anything that gets people to change passwords is probably a good thing ;)